Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Oct 2003 14:46:03 -0500
From:      "Charles Howse" <chowse@charter.net>
To:        <freebsd-questions@freebsd.org>
Cc:        chris@scary.beasts.org
Subject:   Vsftpd not chown'ing uploads
Message-ID:  <000001c3891d$d3a6b280$04fea8c0@moe>

Next in thread | Raw E-Mail | Index | Archive | Help
Hi,
I've Googled half the day for a soultion to this, no joy.
I'm CC'ing the author in case no one in the list knows the answer.

I don't want the user 'virtual' to be able to delete the files they
upload.
When 'virtual' uploads a file, it winds up belonging to: virtual wheel,
and he can delete the file.  He cannot delete files in any other
directory.
Virtual is *not* a member of the wheel group.

How can I configure things so that 'virtual' can upload files, see them,
but not delete them?

Details:

I'm using vsftpd-1.2.0 on FBSD 4.8-RELEASE-p10.
I've created a symlink in /var called 'ftp' that points to /usr/ftp for
disk space reasons.

The directory structure in /usr/ftp is as follows:

[charles@curly ~]$ ls -l /usr/ftp
total 12
drwxr-xr-x    8 root     wheel         512 Sep 23 06:16 Applications
drwxr-xr-x    2 root     wheel        2048 Sep 23 06:18 Bash Scripts
drwxr-xr-x    2 root     wheel        1024 Sep 23 06:18 Tech Docs
drwxrwxrwx    2 root     wheel         512 Oct  2 13:15 Uploads
drwxr-xr-x    4 root     wheel         512 Sep 23 06:19 Utilities
drwxr-xr-x   11 root     wheel         512 Sep 23 06:21 eBooks

[charles@curly ~]$ cat /etc/inetd.conf | grep vsftpd
ftp     stream  tcp     nowait  root    /usr/local/libexec/vsftpd
vsftpd

The only login I allow outsiders is: user: virtual.

[charles@curly ~]$ cat /etc/passwd | grep virtual
virtual:*:1000:1000:Virtual User:/var/ftp:/usr/local/bin/bash

My vsftpd.conf:

[charles@curly ~]$ cat /usr/local/etc/vsftpd.conf
# Access rights
anonymous_enable=3DNO
local_enable=3DYES
write_enable=3DYES
# Security
chown_uploads=3DYES
chown_username=3Dnobody
chroot_local_user=3DYES
anon_world_readable_only=3DYES
connect_from_port_20=3DYES
hide_ids=3DYES
pasv_min_port=3D50000
pasv_max_port=3D60000
# Features
banner_file=3D/usr/local/etc/vsftpd.banner
xferlog_enable=3DYES
ls_recurse_enable=3DNO
ascii_download_enable=3DNO
async_abor_enable=3DYES
# Performance
idle_session_timeout=3D120
data_connection_timeout=3D300
accept_timeout=3D60
connect_timeout=3D60
anon_max_rate=3D50000





Thanks,
Charles

Got a computer with idle CPU time?
Join SETI@home and help make history!
http://setiathome.ssl.berkeley.edu/




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?000001c3891d$d3a6b280$04fea8c0>