Date: Wed, 11 Oct 2000 21:54:27 -0400 From: Garance A Drosihn <drosih@rpi.edu> To: freebsd-security@FreeBSD.ORG Subject: Re: setup anon-ftp without incoming directory Message-ID: <v04210101b60ac943a1d1@[128.113.24.47]> In-Reply-To: <v04210100b60a3471eb74@[128.113.24.47]> References: <v04210100b60a3471eb74@[128.113.24.47]>
next in thread | previous in thread | raw e-mail | index | archive | help
At 11:22 AM -0400 10/11/00, Garance A Drosihn wrote: >In that initial setup, it seems that you must have >some 'incoming' directory. I tried to leave that field >blank in the dialog, and I still got an 'incoming' >directory which was world writable. > >Usually I remember to go back and remove that, but I >forgot on some recent install (installing 'stable', >a few months ago). Have there been any changes to >the anon-ftp setup which would allow one to specify >NO incoming directory recently? I missed saying what was significant about this. On that install where I forgot to remove incoming, I later found that a few unknown persons had found the world- writable directory, and were using my disk for storage space. That had not been my intent... >If not, that might be a nice change to make... Which is to say, if someone blanks-out the field for an 'incoming' directory in the setup for anon-ftp, then there should be no world-writable directory created under ~ftp IMO. --- Garance Alistair Drosehn = gad@eclipse.acs.rpi.edu Senior Systems Programmer or drosih@rpi.edu Rensselaer Polytechnic Institute To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v04210101b60ac943a1d1>