Re: ftpd incoming security

[Vivek Khera]

 "MA" == Matthias Andree [EMAIL PROTECTED] writes:

 --cut here--
 me:\
 :umask=0707:\
 :tc=default:
 --cut here--

MA Can people change the permissions afterwards or the umask before
MA uploading, thus circumventing these settings? I'm not too deep in ftpd.

Hmmm. Yes.  According to the ftpd man page, there are commands "SITE
CHMOD" and "SITE UMASK" that will allow that...  I guess it is back to
using an alternate ftpd for complete security...


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Re: ftpd incoming security

[Matthias Andree]

On Wed, 27 Dec 2000, Vivek Khera wrote:

 MA Can people change the permissions afterwards or the umask before
 MA uploading, thus circumventing these settings? I'm not too deep in ftpd.
 
 Hmmm. Yes.  According to the ftpd man page, there are commands "SITE
 CHMOD" and "SITE UMASK" that will allow that...  I guess it is back to
 using an alternate ftpd for complete security...

I feared just that, that's why I asked. You might of course disable
those SITE commands or restrict them.

-- 
Matthias Andree


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message