[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Qube 3 - Need Root FTP rights



> Me, too! I'm the ONLY user of my Qube3 and I'd like to know how to do
this.
>
> >Hello,
> >
> >I would be gratefull for instructions on exactly how to enable admin/root
> >rights via FTP?

See below.

> >Yes, I understand this could be a security risk but no one else is going
to
> >have these rights but me and I'm the owner/Admin.

Wrong.  Once you allow "RootLogin", you're effectively opening up your
server to a dictionary-based brute-fore password attack.  Just because "only
you know the root password" is not an effective security policy.

If you absolutely must allow RootLogin, you should allow it only under a
VHOST with very tight ACLs.  Even at that, I'd allow it only for as long as
necessary.

> >The default install won't even let me set permissions to 755 or 777 via
FTP
> >and I'm logging in via the Admin password.

That's most likely because the username you've used to login doesn't have
the necessary permissions to perform such actions on those files.

Without further delay, here's how to open up your server:

(From the ProFTPD documentation directly)
==========
RootLogin
Syntax: RootLogin on|off
Default: RootLogin off
Context: server config, <VirtualHost>, <Anonymous>, Module: mod_auth
<Global>
Compatibility: 1.1.5 and later
Normally, proftpd disallows root logins under any circumstance. If a client
attempts to login as root, using the correct password, a special security
message is sent to syslog. When the RootLogin directive is turned On, the
root user may authenticate just as any other user could (assuming no other
access control measures deny access); however the root login security
message is still sysloged. Obviously, extreme care should be taken when
using this directive.
==========

I take ZERO responsibility if you're server is hacked.  I'm merely relaying
public knowledge (and NO, I will not provide instructions on what files you
need to edit, etc.).