Subject: Re: ftpd question
To: Rick C. Petty <pett0019@gold.tc.umn.edu>
From: Henry B. Hotz <henry.b.hotz@jpl.nasa.gov>
List: port-mac68k
Date: 08/01/1996 16:29:20
>I'm trying to setup an ftp account on a site (we're running Solaris 2.5).
>I setup the user's home directory (/home/user/) but I want the ftpd to
>pretend it's at / when that user logs in.  We can't do anonymous ftp for
>additional security reasons, but I don't want that user to browse around
>the system either (cd .., cd /etc/, and so forth).  We want to restrict
>this user to his home directory only (visible to him only as "/")...

You can play some games with the chroot command.  It means hacking your own
solution, but I think you could do it something like:

Make a script that does a chroot to say /home/usr/ftp and then starts the
ftp daemon.

Edit the /etc/inetd.conf file to start that script instead of the in.ftpd
for an ftp connection attempt.  (If this is harder than I presume, try
looking at the code for the security package called tcpwrappers.)

Follow the directions in man ftpd for setting up anonymous ftp service.  It
describes what files need to be copied to the alternate root and what
permissions are needed.

I believe this general approach should work for *BSD systems as well, but I
don't know if the ftpd man page has the same detail as to the minimum
system files needed in the alternate root.

This solution has not been tested.  It's just my theory.

Signature failed Preliminary Design Review.
Feasibility of a new signature is currently being evaluated.
h.b.hotz@jpl.nasa.gov, or hbhotz@oxy.edu