Lukemftpd and directory permission

[Matthew Seaman]

On Fri, Jul 11, 2003 at 12:55:35PM -0400, Paul MacKenzie wrote:
> Hi,
> 
> I was testing out the lukemftpd in stable and ran into this problem which 
> is probably easy to fix but is stumping me.
> 
> When we create a directory under any class, the read and execute 
> permissions on the Other bit is disabled (no "Other" read permissions on 
> any directory created via FTP). This poses a problem as any directory 
> created under FTP will not be readable for web purposes.
> 
> Here is the command we had in Inetd.conf
> 
> ftp    stream  tcp     nowait  root    /usr/libexec/lukemftpd  ftpd -ll -r 
> -u
> 
> Any ideas why this is happening?

Yes.  The default umask for lukemftpd(8) is 027.  Read the
ftpd.conf(5) manpage for detailed instructions on how to modify that
value, but you probably want to create a /etc/ftpd.conf file and
include within it:

    umask real 022

You should also read ftpusers(5) and make sure you've set up your
users with the right classes etc.  For backwards compatibility, just
listing the username in /etc/ftpusers disables that account from using
the FTP service.  Certainly you should disable FTP access for root and
all pseudo-users.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030711/825ff343/attachment.bin