Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 16 Feb 2003 16:54:19 -0500
From:      Walter <walterk1@earthlink.net>
To:        Bill Moran <wmoran@potentialtech.com>
Cc:        Giorgos Keramidas <keramida@ceid.upatras.gr>, Questions <freebsd-questions@freebsd.org>
Subject:   Re: allowing access to a single directory
Message-ID:  <3E50088B.1020108@earthlink.net>
References:  <3E4FA06D.1070508@earthlink.net> <20030216184533.GB86184@gothmog.gr> <3E5003C7.2020302@earthlink.net> <3E5006FC.9040304@potentialtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Bill Moran wrote:
> Walter wrote:
> 
>> Giorgos Keramidas wrote:
>>
>>> On 2003-02-16 09:30, Walter <walterk1@earthlink.net> wrote:
>>>
>>>> I want to allow an anonymous FTP user to see a directory in another
>>>> slice, so I put a symbolic link to it.  But then anyone could access
>>>> my entire file system by appending combinations of "../" to a path
>>>> name; e.g. "ls share/../".  Is there a way to stop this by only
>>>> allowing access to the linked directory and nothing more?
>>>
>>> Symlinks in anonymous FTP don't work, since anonymous ftp sessions are
>>> chrooted in the home directory of the `ftp' user.  You should probably
>>> move the files in ~ftp/stuff and then symlink to ~ftp/stuff from other
>>> parts of your tree.
>>
>> The /var slice does not have enough space to hold
>> these files.  So it sounds like I need to find
>> another solution (like move in another HD).  Thanks.
> 
> You could always move the FTP directory to a slice that has room.

Yes, I actually thought of that, but then I'd leave
my (in this case) /usr slice vulnerable to being
filled-up with ... junk.  Unless I put in quotas,
I suppose.  Hmmm.  I'll think on that; but I also
have an HD which I'm not really using.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E50088B.1020108>