The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Top Forums > UNIX for Dummies Questions & Answers
Google UNIX.COM


UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !!

Closed Thread
 
Submit Tools LinkBack Thread Tools Display Modes
  #1  
Old 09-14-2001
DPAI's Avatar
Registered User
 

Join Date: Jul 2001
Posts: 112
Ftp

Is there any way i can disallow an ftp Login to change current working directory??
Forum Sponsor
  #2  
Old 09-15-2001
Neo's Avatar
Neo Neo is offline
Administrator
 

Join Date: Sep 2000
Location: Asia Pacific
Posts: 4,441
Yes, with the proper restricted environments using utlities like chroot. You basically do not give the user any ability to cd or to execute commands outside of a very restricted setup.
  #3  
Old 09-16-2001
DPAI's Avatar
Registered User
 

Join Date: Jul 2001
Posts: 112
I just have one more doubt,
I want to diable Telnet for an user , but that user must be able to ftp ....
Wat are the choices i have ...
I tried to stop it in .login . But problem is it logs in using X-server .

1) Can i specify a shell as /bin/false ... so that it cannot login .
Will this work for both X - login as well as telnet ..
  #4  
Old 09-16-2001
rwb1959's Avatar
Registered User
 

Join Date: Aug 2001
Location: Virginia, USA
Posts: 438
If you are using tcp wrappers (tcpd), you can
control what users are allowed to use what
services individually.
Check out the man page host_access(5)

For instance in /etc/hosts.allow...

in.telnetd: ALL EXCEPT jsmith@some_host
in.ftpd: ALL

This would allow Telnet for all EXCEPT user jsmith
and FTP to all. However, you should not get
carried away with user lists since it will
cause a lookup to occurr. Obviously, you also
would NOT want to open these services to "ALL"
so I would recommend further restricting this
by using "LOCAL" or even some IP range that
maps to your internal network (or sub-net).
  #5  
Old 09-16-2001
DPAI's Avatar
Registered User
 

Join Date: Jul 2001
Posts: 112
Watever answer u gave is acceptable for telnet .
But i also do not want the user to login using X11 .. ie. On the console or on a direct terminal
  #6  
Old 09-16-2001
rwb1959's Avatar
Registered User
 

Join Date: Aug 2001
Location: Virginia, USA
Posts: 438
For X11, I would recommend using an authorization
file for X. See xdm(1) and Xsecurity(1) for
details on this. Essentially, this sets up
access control lists for X-Windows.
Google The UNIX and Linux Forums
Closed Thread

Thread Tools
Display Modes




All times are GMT -7. The time now is 08:41 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008. All Rights Reserved.Ad Management by RedTyger Visit The Complex Event Processing Blog

Content Relevant URLs by vBSEO 3.2.0