Subject: Re: Securing Anonymous FTP Uploads
To: None <tech-security@NetBSD.ORG>
From: Simon J. Gerraty <email@example.com>
Date: 03/29/1997 19:40:24
"Perry E. Metzger" <firstname.lastname@example.org> writes:
>Curt Sampson writes:
>> * Disables the umask, chmod, delete and rmdir commands for anonymous
>Very good, but you should also prohibit directory creation as well.
I simply added a -D option to ftpd which disables named commands.
You can then simply run ftpd with -DSITE,UMASK,CHMOD,MKDIR
This also allows you to create user ftp-only accounts which are just
as retricted as anon-ftp.