Re: [Proftpd-user] running proftp under non-privileged user

> So, it has to be owned by the running user, or at readable it we relax the 
> permission check:
>
> SFTPOptions InsecureHostKeyPerms
> SFTPHostKey /etc/proftpd/ssh_host_rsa_key
>
> It works although complains in log as well:
>
> Mar 20 15:54:37 server proftpd[175306]: Checking syntax of 
> configuration file
> Mar 20 15:54:37 server proftpd[175306]: 2026-03-20 15:54:37,411 server 
> proftpd[175306]: mod_sftp/1.1.1: unable to use 
> '/etc/proftpd/ssh_host_rsa_key' as host key, as it is group- or 
> world-accessible

Even with "SFTPOptions InsecureHostKeyPerms", I wanted to log something, at config parse time, so that admins would be aware of the insecure permissions on those files.  Perhaps that is overkill?  At the very least, I will change the log level from NOTICE to INFO (perhaps DEBUG?), and change the wording to be more accurate, as "unable to use" when, in fact, the key _is_ used is wrong.

Cheers,
TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html