Subject: Re: Securing Anonymous FTP Uploads
To: None <tech-security@NetBSD.ORG>
From: Simon J. Gerraty <sjg@quick.com.au>
List: tech-security
Date: 03/29/1997 19:40:24
"Perry E. Metzger" <perry@piermont.com> writes:
>Curt Sampson writes:
>> * Disables the umask, chmod, delete and rmdir commands for anonymous
>> users.
>Very good, but you should also prohibit directory creation as well.
I simply added a -D option to ftpd which disables named commands.
You can then simply run ftpd with -DSITE,UMASK,CHMOD,MKDIR
This also allows you to create user ftp-only accounts which are just
as retricted as anon-ftp.
--sjg