setting default permissions (*nix)

[smp]

Okay, student webserver here.. .trying to set up their home directories so that they have to do the least possible amount of tampering.
We've put a public_html/ folder in /etc/skel/ and that works fine and has the proper permissions .. but when a user FTP's to the server and dumps an index.html or something, the permissions are wrong and it can't be viewed from a browser.

Is there any way to set a recursive permission on home directories so that anything that is dumped in there has the same permissions? Or, is there another way to resolve this?

 

[Nothinman]

Set the FTP server's umask to be less restrictive.

 

[smp]

Originally posted by: Nothinman
Set the FTP server's umask to be less restrictive.

Yup, I got that far, but now I'm having troubles figuring out how to configure debian's (woody) ftp server. I can't even figure out what it uses as an ftp server. FTPD is as far as I get, in.ftpd it looks like, but the man page says nothing of a configuration file.

 

[drag]

umm. try just looking in the /etc/ folder? That's were the configuration files are at.

Here try this
du -a /etc/ 2> /dev/null |grep ftp

 

[Nothinman]

Depends on what FTP server you installed, there are quite afew available. I would recommend ProFTPd, it's pretty easy to setup and well supported.

Running `dpkg -l '*ftp*' | grep ^ii` should give you an idea what ftp server you have installed.

 

[smp]

Okay .. adding '-u 022' in the inetd ftpd startup fixed all.
It's funny, but there is no configuration file for ftp on a woody debian box.
It's what I'm used to /etc/$/$.conf
oh well, problem solved. Thanks

 

[smp]

Originally posted by: Nothinman
Depends on what FTP server you installed, there are quite afew available. I would recommend ProFTPd, it's pretty easy to setup and well supported. Running `dpkg -l '*ftp*' | grep ^ii` should give you an idea what ftp server you have installed.

Thanks Nothinman, glad to see you still hang around these parts 🙂
Is n0cmonkey still around?

We're using the defualt woody ftp server, which is in.ftpd, something I've never heard of. I like proFTPD too.

 

[smp]

Okay, another question:
chrooting users using the /etc/ftpchroot file. The man page doesn't tell me much (either the ftpchroot or chroot) and I don't really know what syntax to use to put users in there and chroot them to their home directory. I don't want them to be able to browse the whole file system.

# /etc/ftpchroot: list of users who needs to be chrooted. See ftpchroot(5).

 

[Nothinman]

Just put a username, it seems that it only chroot's them to their home directory. If you want more flexibilty you probably need to switch daemons.

 

[Barnaby W. Füi]

Sounds like you're using bsd-ftpd, which is really a very basic ftp server, no complicated config files, etc.

 

[smp]

Originally posted by: BingBongWongFooey
Sounds like you're using bsd-ftpd, which is really a very basic ftp server, no complicated config files, etc.

yeah, I think that was it 🙂
We've removed it and put proFTPD in it's place, much better.
And yes, Nothinman, chrooting them just put them in their home directory .. but, ls would then be broken. Pretty weak, but apparently a bug with that deamon.