[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] ftpwho



-----Original Message-----
From: Gerald Waugh [mailto:gwaugh@xxxxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, June 28, 2002 4:48 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] ftpwho


On Friday 28 June 2002 04:31 pm, Jolley, Carl wrote:
<SNIP>
> So is there a fix?? Why would the ftp user and pass work before and now
> with the update not. Is it more of a proftpd issue??
>
> Everything works great, or so I am assuming, just no darn idea what site
> you are doing when you log in the first time when you ftp. I guess for
> setting absolute linux paths I could use www.domain.com and not site#.
>
> _______________________________________________
>
> Is this a proftpd issue?
>
> It might be. If previously proftpd grabbed the
> contents of /etc/user and /etc/group BEFORE
> doing the chroot call but the current version
> tries to access the files AFTER the chroot()
> call that would explain the behaviour.
>

It looks like proftpd is doing it, I downloaded and ran proftpd 1.25 on a 
test server and it does the same thing....
There must be some kind of a new config, that will take care of it.

proftpd creates the chrrot jail when a user logs in, during that process it 
should get the user and goup information. Hell, maybe its using its own 
version of 'ls'
_______________________________________-

Even if its using the standard ls for directory listings,
ls would just be trying to open and read the /etc/passwd
and /etc/group files and would not succeed in a chroot'ed
environment. In a chroot'ed environment there is no /etc
directory except as it may occurn within the new root
environemnt. The chroot() call superseds even a suid root
setting.