Re: chroot setup
Bonato Agostino <[email protected]> Thu, 07 Dec 2006 12:59:29 +0100
| Newsgroups | gmane.network.ftp.wuftpd.user |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --------------080508040507040804080003 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Hi, Nirvana is good on saturday evening On unix Solaris 9: create a ftp structure ftpconfig -d /mydir/ftp add user only for ftp ( no shell ) *useradd -m -c "Guest FTP" -d /mydir/ftp/test --s /bin/true test* modify /etc/shells and add /bin/true. Example: */bin/sh** /bin/ksh** /bin/bash /bin/true* set a password passwd test configure /etc/ftpd/ftpaccess and add to the default* guestuser test ** guest-root /mydir/ftp* modify the file <guest-root>/etc/passwd aka /mydir/ftp/etc/passwd with only user, group and home copied from the system /etc/passwd Example: /etc/passwd* test:x:1032:100:Guest FTP:/mydir/ftp/test:/bin/true /mydir/ftp/etc/passwd ** test:x:1032:100::/test:* modify the permissions on the directory * chmod 700 /mydir/ftp/test**** chown /mydir/ftp/test test* Now at ftp login you are in /test as root directory bye Robert Spielmann ha scritto: > Hi, > > I want a simple FTP setup with users from /etc/passwd who are supposed > to be locked inside their homedir. I tried several approaches from FAQs > and Google search results, but the only thing I managed to do was that > my user found himself inside an empty directory in Nirvana :-) > > Can someone help me with this? > > Thanks, > Robert > > -- <http://www.sistemi-servizi.it/> *Bonato Agostino* */Sistemi & Servizi Informatica S.r.l./* /SUN System and Network Certified/ /HP System Administrator/ /Oracle DBA / Tel. +39 0423 722324 Fax. +39 0423 498302 email: [email protected] <mailto:[email protected]> web: http://www.sistemi-servizi.it <web:%20http://www.sistemi-servizi.it> --------------080508040507040804080003 Content-Type: multipart/related; boundary="------------060501080909000801070308" --------------060501080909000801070308 Content-Type: text/html; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content=3D"text/html;charset=3DISO-8859-15" http-equiv=3D"Content-Type"> </head> <body bgcolor=3D"#ffffff" text=3D"#000000"> Hi, Nirvana is good on saturday evening<br> <br> =A0On unix Solaris 9:<br> <br> create a ftp structure<br> <br> ftpconfig -d /mydir/ftp<br> <br> add user only for ftp ( no shell )<br> <br> <span style=3D""> </span><b style=3D""><span style=3D"" lang=3D"EN-GB">us= eradd -m -c "Guest FTP" -d /mydir/ftp/test –s /bin/true test<o:p></o:p></span></b> <br> <br> modify /etc/shells and add /bin/true. Example:<br> <br> <b style=3D""><span style=3D"" lang=3D"DE">/bin/sh<o:p></o:p></span></b><= b style=3D""><span style=3D"" lang=3D"DE"><br> /bin/ksh<o:p></o:p></span></b><b style=3D""><span style=3D"" lang=3D"DE">= <br> /bin/bash<br> /bin/true<o:p></o:p></span></b> <br> <br> set a password<br> <br> passwd test =A0=A0 =A0=A0 <br> <br> configure /etc/ftpd/ftpaccess and add to the default<b style=3D""><span style=3D"" lang=3D"EN-GB"><br> <br> guestuser<span style=3D"">=A0=A0=A0=A0=A0=A0 </span>test =A0=A0 =A0=A0 =A0= =A0 =A0=A0 =A0=A0 =A0=A0 =A0=A0 =A0=A0 =A0=A0 <o:p></o:p></span></b><b style=3D""><span style=3D"" lang=3D"EN-GB"><br> guest-root<span style=3D"">=A0=A0=A0=A0=A0=A0 </span>/mydir/ftp<o:p></o:p= ></span></b> <br> <br> modify the file <guest-root>/etc/passwd=A0 aka=A0 /mydir/ftp/etc/passwd with only user, group and home copied from the system /etc/passwd<br> <br> Example:<br> <br> /etc/passwd<b style=3D""><span style=3D"" lang=3D"EN-GB"><br> test:x:1032:100:Guest <a class=3D"moz-txt-link-freetext" href=3D"FTP:/mydir/ftp/test:/bin/true"= >FTP:/mydir/ftp/test:/bin/true</a><br> <br> /mydir/ftp/etc/passwd<br> <o:p></o:p></span></b><b style=3D""><span style=3D"" lang=3D"EN-GB"><br> test:x:1032:100::/test:<o:p></o:p></span></b> <br> <br> modify the permissions on the directory<br> <b style=3D""><span style=3D"" lang=3D"EN-GB"><br> chmod 700 /mydir/ftp/test<o:p></o:p></span></b><b style=3D""><span style=3D"" lang=3D"EN-GB"><o:p></o:p></span></b><b style=3D""><span style=3D"" lang=3D"EN-GB"><br> chown /mydir/ftp/test test<o:p></o:p></span></b> <br> <br> Now at ftp login you are in /test as root directory<br> <br> bye<span style=3D"font-size: 12pt; font-family: "Times New Roman&quo= t;;" lang=3D"EN-GB"></span><span style=3D"" lang=3D"EN-GB"><o:p></o:p></span>= <br> <br> Robert Spielmann ha scritto: <blockquote cite=3D"mid1165419467.6166.10.camel@hollerith" type=3D"cite"> <pre wrap=3D"">Hi, I want a simple FTP setup with users from /etc/passwd who are supposed to be locked inside their homedir. I tried several approaches from FAQs and Google search results, but the only thing I managed to do was that my user found himself inside an empty directory in Nirvana :-) Can someone help me with this? Thanks, Robert </pre> </blockquote> <br> <div class=3D"moz-signature">-- <br> <table style=3D"page-break-before: always;" border=3D"0" cellpadding=3D"5= " cellspacing=3D"0"> <tbody> <tr> <td> <a href=3D"http://www.sistemi-servizi.it/"><img src=3D"cid:[email protected]" name=3D"Immagine1= " align=3D"bottom" border=3D"0"></a> </td> <td> <p><strong><font style=3D"font-size: 11pt;" size=3D"2">Bonato Agost= ino</font></strong><font style=3D"font-size: 11pt;" size=3D"2"> </font> </p> <b><i>Sistemi & Servizi Informatica S.r.l.</i></b><br> <i>SUN System and Network Certified</i><br> <i>HP System Administrator</i><br> <i>Oracle DBA </i><br> <br> Tel. +39 0423 722324<br> Fax. +39 0423 498302<br> <a href=3D"mailto:[email protected]">email: [email protected]</a><br> <a href=3D"web:%20http://www.sistemi-servizi.it">web: http://www.sistemi-servizi.it</a><br> </td> </tr> </tbody> </table> </div> </body> </html> --------------060501080909000801070308 Content-Type: image/jpeg; name="Immagine1" Content-Transfer-Encoding: base64 Content-ID: <[email protected]> Content-Disposition: inline; filename="Immagine1" /9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8S EhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wBDAQUFBQcGBw4ICA4eFBEU Hh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh7/wAAR CABGAJIDASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAA AgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWG h4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl 5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREA AgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYk NOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk 5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD7Ix7Z+vf60Y9s/Xv9aMe2fr3+tGPbP17/ AFpDDHtn69/rRj2z9e/1ox7Z+vf60Y9s/Xv9aADHtn69/rRj2z9e/wBaMe2fr3+tGPbP17/W gAx7Z+vf60Y9s/Xv9ao69q2m6Fpcup6rdR21rEBueQ9Segx3PoK+cvib8XtW8QvNp2hNLpul HKMwOJ7gerEfdHsPxPauDHZlQwUb1Hq9l1Pbybh/GZvO1CPureT2X+foj2zxd8R/Cvhp3gu7 77TdqD/o9uN7E/3WPRT9SMV5vq3x2ndWXTdNtoWOAokLTOefYKufx/OvFdKsNQ1nUYNNsbea 5urhwiInJJPU57Ackk9ME19M/DX4SaF4asYLjVbeHVNXHzNJKuYojj7qr04/vEZJJ6cAeThc djMyn+6XJBdd/l5n1uY5NknD9NLEt1ar2W3za6L1u+xiaN8RPF8lpDqGr2Mdjp9xKscV5NYP 9nJI/jw25Rkj5+R19K9G0XxEl3qsmj30CWmoovmIgk3x3EfHzo2ORz06iqHxL1S1ttJXRr7R tU1KHWkksx9jWIlWKcA72XDEZK9eVrG1HQ9cg8A+HLqzsZZ/EGjiAiPzB5jgcOhYnGMZ6kiv ahz0/du5W/r/AIY+RxCo4lRqKCp8zstdPJ/fo2/VWPRce2fr3+tGPbP17/WsHwT4otvFmnz3 9pp1/ZwxTtB/paovmMpw2NrNkA8Z9fWt7Htn69/rXVGSkro8ipTlSm4TVmgx7Z+vf60Y9s/X v9aMe2fr3+tGPbP17/WmQGPbP17/AFpVHOef8frSY9s/Xv8AWlUc55/x+tADqKKKYhmPbP17 /WjHtn69/rWL438TaX4Q8OT67q/ntBGyRpFBHvluJXYLHEi8ZdmIUZIGTyQMmuT0z4jeJL7U reyPwh8aWomkCNPcm0WKME/eciY8DrwCfQE8Uhno2PbP17/WjHtn69/rXm5+L+iS+GdN1fT9 F1rU7jV725tNL062ija4vfIZg8q5YKIwFLZZhwR3OKk034ja9dPL5/wm8bWkcULSM0yWp3kD hFCzEsxPA6DuSBkgEeiY9s/Xv9aq6tdtYabPeJZ3N60aZWC3QNJKeygHAz7k4HevNPDXxgu9 d1m70yD4Z+LYDYXIttRnuTaLFaNsWQ+YfOPRGVuATz68UvhX4uan4mtNNvtK+FPjOSw1FUeC 8k+yJE0bYw5JmyFxznGcdqTTa0Ki0ndnm/xC0z4oeMtZN3f+G9Sjtkz9ntVBKRD+Rb1bqfpX Nr8NvHTsqf8ACMagMkDJTAHPrnpX0f8ADn4j+G/H1/4gs/D7XLtoN+bG6eZFVZXGfmTBJKZB AJA6dKwrn43eD/tniG00+HUdSl0PU7PS5WgjjMdzcXMgjVImLfMUYsGyB9xsZ4z8/V4cpVpu dSpJt+n+R93huPsThaKoUKEIxWyV/wDP89zS+EPw+svBukrczRrNrFyg+0TMB+7B58tfQDjP qfwFd5j2z9e/1rH8beJNL8H+GL3xFrLTCytAm8QxGSSRndURFUdWZ2VR7kZxWH4O8Z614g1g 2N38OfE2g26oWa81M2yxnHRcJIzEn2GPevdpUo0oKEFZI+KxWKq4qtKtWleUnds6nWNNtNW0 6awvo/MgmXB7EHsQezA8g+tcldXniO8dfB0sFxFeSgi41dIR5RtRgbxkbfNfJXb/AAnLYI63 /H/jW18Jtp1ouk6nreq6m7rZadp8aNNMEXdIx3sqqqjGST3AGa5uX4rX1lpGqaxrnw18WaLp ml2Mt5c3N8bVQwRSQihZSWdiAAOmTyRVShcKVf2ejV+qv0ff/gbPS56Np1lbafp9vYWcIito IxHGnoAO/v796nx7Z+vf615/4W+IWu67qtnaN8LfF2m29xgte3xtUhjUjO5sSlj9ACfasKP4 2SXVheatpXwy8Zano9tJOo1GBLbyZlhZlZxulB2/IT0qrGDbbuz13Htn69/rRj2z9e/1rjPh r8SfDfj3wRceMNMF5ZaVbyyxyvqCJGwWMBi5Cs2F2nIzg47VU8G/FPSPFV7a22n6LrkRudC/ txfPgjDeQZfLiBVXY7pAC6D+7jODxQB32PbP17/WlUc55/x+teQ3vxqu7LXtJ0S9+FfjW2vN YuGgsY5ltA0xUbmJAmOAq8k9AO9d74A8V2fjDTL3UrC0ure3tdRudPDzbP35gcxtIu0nKFgw BODx0oEdHRRRTA82+O1x4El0Gy0jxj41g8KztdxX+nXX2pIp0mgcMsihgQ2046gjkV5Ynjq7 8P3euat4a+KOpeOtD0zwxfXuoT3RgeG3ugUW0jR4kXEjNvyCTxjivpSe1t5yrT28UxAwDIgJ /UcUJaWyQtEltCsbfeTYArfUYoA+eLvTPh54f8IeANB134oReCvFXhfSQivbXkKzJ9oiTz1Z JFYYZlBBwDx712P7P2r6nqWo+Lv+KvvfFvha1nto9K1a9EeZpPLLXO10VVaNSYwD2IavVJLK zlcySWlvI56s8akn68VLHGkcQjjRUQcBQABz7AcUAfOdjrx039lLxt4+3i3m8T3eo31u0h24 FzcGGANnphdg+lTeANZ8H+FvDtxNovxv1DxSnh/w/LLDpAuIGhijhhChiI4w21eAAW7jOTX0 I1vA0AhMETRDACFRt/LFZ2uXOl6FpFzqE9rEIwoXy0jXdOzHCxgd2YkAD1NJySV2VCEpyUY7 s+bfCngH4haBaeG9O8F2rWsHi3wta2+u6sHC/wBm3HmNPNN0JaRkmlRf9raT0qp8MdA0m48c +HtK0q1ig0q78Z3up26IQSbPSbf7Lbux7kz5YnkkkknOa+lPC2tXd7I+nazYRabq8UYmNsj7 keI4wytgZwTtPoR6EVtpBEhUpDGpUELhQMZ5I6cUoyUldDnBwdmeP/tVXWnyeGvDvhvWNTTR dL1nWolvdXdthsY4FM4ZZOiSFo1VSc9TVH9nbx5bX/ivxL4Ov/GV14luUuBc6NqFxcxyxX1m EUHymRFBdGLb1wcZHJAJr26aGKZNksSSr6OoIP14rkfiP4x0PwHpltc3VkJ7mVitpbRIFZv7 5zjCgZ5PckDvU1asKMHObska4XC1sXWjRoR5pS2SOP8AjTf/AA8n8V6W+q/FdfBniLR4ZUje 2u4FmEU+wsrrIrAZ8tD0B4968o8YeJJtS+GviTQtW+IE+reDtX8S6bo+na/qAiV2iwsl7Irq qo8ahcKcHlWHNehyfHbR5HLyeDfMc/eZrhCW+p2V0fgP4kN411KLTNP8FN9kiIM08twvlW6n uRs6+ijk+wyRwUc4wdaahTndvyf+R7GK4WzXC0pVq1Llit25R/zMDQ/Fmg6H4L8aeJ9K+L2o ePZtL0mSfyp54Gjtm2sUOIkUBmYADPocCuP13wN4v8D/ALOen2Y+IOrOJ7Kz09dB+x2y27zX TojQGQR+bsLSOCwbdjnNfTiWtskbRpbQhH+8uwAN9RinyRpIAHRXGQRuAPPbt1r0z58+ZrDS nv8A4g+Kfgfo1vLaaPPrqanqzRLsjh0kWtv+4Vv70sv7vHJ2LJn1rftfHvhfwXr/AMUPiHrV wiWFtqFt4d023jKhp3tIeYI1zjIllkHYALk4Ar3kRKJC6xoGfG5sDLY6Z4pklpbSKFe2hddx bDRg5Y9SeOvvSA8F+H3jLwYlr4i+IGr+M9F17xxLpU95LDZXAmXSrONdwtYeuEU43Pxvfk54 r0j9n/RX0D4M+FdPm3CdrBbq4B/57TkzSf8Aj8jV2MdlaRqwjtIFDjawEajcPQ8VYQAYwMDG OKYDqKKKAGY9s/Xv9aMe2fr3+tGPbP17/WjHtn69/rSGGPbP17/WjHtn69/rRj2z9e/1ox7Z +vf60AGPbP17/WvOfFGp6tp/jm21XXNDlbQLWZbfT5VmjIWaQBTPIuSwxyBxwDnjJr0bHtn6 9/rWf4i0i21zRbnS7sssc6gB1+8jA5Vh7ggEVnVg5LR6/wBbnTha0aU/fV09HvdJ7tarW3fQ 5f4mXmo/btLsfD2lS3uuBHvLWWOeKPYiFA6t5hAZH3gFQc9/4cjsrGSeaygmubY208katLCz KxRiASpK5BweMgkV5fr8Wu2a6VfXsvla7oMpS3uZo3a1v4XXaQzgEISD1bGDjnvWN4o+LniO 6ifTfD2hCwvSSklxJIsxj7bkXGDgkEEgjpwc1y1cVCg5SnfyX9dfVnr4fK62Pp06VBR0veTd uvm/htbZXvfqelfEHxlpHgzRnvtQfzbhgBb2iMPMmY5xx2UYOWPTHc4B+T/GHiPVPFWvTatq 8plmkOEUfciQchFHZRn6k5JySTXVWPw78ceLNRN9NDcTPM5aW6u2MaZPOfm5I56KD9Oleq+C PgnoOlPBfa639qXseCIslYFbg9Orfjwe4rwsXRxuayUUuSmu/wCbPtcur5LwvTlKVT2td72/ Jdl3u7v7keUfC/4Y6v4ykjvZc2OjrIA9ww+aUdxGO/pu6A+uCK+mvDWg6X4c0iLS9HtEt7aP t1LtgZZz1LcdTWjFGkUSRRRqkaKFVAAAAOgwBxinY9s/Xv8AWvay/LKOBjaGre7Pis+4kxec 1L1NILaK2+fd+f3Bj2z9e/1ox7Z+vf60Y9s/Xv8AWjHtn69/rXonz4hzxxkHg5/rSjkev17/ AFpGXIH8z/WhVxnvk9+/1oAXHtn69/rSqOc8/wCP1pMe2fr3+tKo5zz/AI/WgB1FFFMQm0eg o2j0FFFABtHoKNo9BRRQAbR6CjaPQUUUABVSCCAQeoPeo0trdG3JBEp9QgFFFFgJCAeozRtH oKKKADaPQUbR6CiigA2j0FG0egoooANo9BRtHpRRQAbR6ClAAOaKKACiiigD/9k= --------------060501080909000801070308-- --------------080508040507040804080003--