[질문] wu-ftpd 접근권한에 대해 질문 좀....
지금 wu-ftpd 어찌어찌 겨우겨우 해서 동작은 되게 해놨는데요...
이제 접근권한만 하면 다될것 같은데 이게 잘 안되네요;;;
메뉴얼을 봐도 무슨 소린지 이해도 잘 안가고;;;
지금 할려는게 passwd에 있는 특정 유저의 홈디렉토리를 /jffs2/config로 해놓는데까지는
성공했는데 이 유저가 저상위 디렉토리 이상 접근을 못하게 하고싶습니다...realuser, guestuser
이런 얘기들 막 나오는데 이해가 잘 안되네요...;
ftpaccess파일의 어느부분을 손봐야 하는지 지적좀 해주셔요;
# Debian default wu-ftpd `ftpaccess' configuration file, derived from
# the `ftpaccess.heavy' example in wu-ftpd sources.
# For more options/commands see ftpaccess(5) and /usr/share/doc/wu-ftpd/*.
# Some of the example message files have been translated to Spanish,
# and are available in /usr/share/doc/wu-ftpd/examples/.
# (thanks to Javier Fernandez-Sanguino Pen~a
# E-mail address of the FTP admin, can be accessed via the %E in messages.
email ftpadmin@misconfigured.host
# Which UIDs and GIDs may, and which may not use the FTP service.
#deny-uid %-99
#deny-gid %-99
allow-uid ftp ftpadmin
allow-gid ftp ftpadmin
# Maximum number of retries after login failures, before disconnecting.
#loginfails 5
guestgroup real real
guestuser real real
realgroup real real
realuser real real
# Can users see anything else but their home directory
restricted-uid 500
restricted-gid 500
#unrestricted-gid ftpadmin
# Allow use of private file for SITE GROUP and SITE GPASS?
#private no
# What kind of greeting to give.
#greeting
# Banner to show immediately on connect.
banner /etc/wu-ftpd/welcome.msg
# Deny access to specified hosts, with message.
#deny *.microsoft.com /etc/wu-ftpd/msg.deny
#deny /etc/wu-ftpd/denied.hosts /etc/wu-ftpd/msg.deny
# !nameserved means hosts that can't be resolved.
#deny !nameserved /etc/wu-ftpd/msg.nodns
# Various DNS related options.
#dns refuse_mismatch [override]
#dns refuse_no_reverse [override]
#dns resolveroptions [options]
# Class name typelist addresses
#class local real,guest,anonymous *.my.domain 192.168.0.0
#class remote real,guest,anonymous *
class all real,guest,anonymous 192.168.0.100
# Limit who how many date/time message file
#limit local 20 Any /etc/wu-ftpd/msg.toomany
#limit remote 100 SaSu|Any1800-0600 /etc/wu-ftpd/msg.toomany
limit all 10 Any /etc/wu-ftpd/msg.toomany
# The files that wu-ftpd will recognize as must-be-read, and display them.
message /welcome.msg login
message .message cwd=*
# The files that wu-ftpd will recognize as should-be-read, and warn about them.
readme README* login
readme README* cwd=*
# Whether to use compression.
compress no local remote all
tar no local remote all
# Logging of actions.
log commands anonymous,guest,real
#log security
#log syslog
log transfers anonymous,guest,real inbound,outbound
# The file wu-ftpd will check to see if the server is going to be shut down.
# (use ftpshut to generate it)
shutdown /etc/wu-ftpd/shutmsg
# These files are marked unretrievable
noretrieve /etc/passwd /etc/group
noretrieve core
# The directory to which anonymous FTP user will chroot to.
# Note: if you change this {add,rm}ftpuser may stop functioning.
#anonymous-root /jffs2/config
# Password verification for the anonymous FTP user.
# []
passwd-check none warn
# Maximum connection time in minutes
#limit-time anonymous 30
# Some permissions for the anonymous FTP user.
# All the following default to "yes" for everybody
rename no anonymous # rename permission?
delete no anonymous # delete permission?
overwrite no anonymous # overwrite permission?
chmod no anonymous # chmod permission?
umask no anonymous # umask permission?
# Anonymous FTP directories upload settings
# anon-ftp-root path allow? owner group mode dirs?
upload /jffs2/config * yes
upload /jffs2/config /jffs2/config yes nodirs
# What can a filename contain (this /etc is under the anonymous-FTP root)
path-filter anonymous /etc/pathmsg ^[-+A-Za-z0-9_.]*$ ^\. ^-
# Shortcuts for anonymous FTP incoming (note: the ':' isn't obligatory)
alias incoming: /pub/incoming
cdpath /pub
guest-root /jffs2/config
-----------------------------------------------------------
이것이 제 ftpaccess파일 내용이고
-----------------------------------------------------------
[root/etc]# more passwd
root::0:0:root:/root/:/root/raybitsh
sshd::0:0:root:/root/:/root/raybitsh
rnd:0dHMzQcIuqsoA:0:0:anon rnd:/root/:/bin/bash
debug:SjrpDcvKgnbA6:100:200::/root/:/root/raybitsh
recover::101:300::/root:/root/raybitsh
nobody:*:99:99:Nobody:/:
guest:U0NaGcdpBn9HA:301:300:guest:/jffs2/config/./jffs2/config:/bin/bash
real:LjLrVL1vPGW8c:500:500:Embedix User,,,:/home/real/./jffs2/config:/bin/bash
[root/etc]# more group
root::0:
bin::1:
daemon::2:
sys::3:
adm::4:
tty::5:
disk::6:
lp::7:
mem::8:
kmem::9:
suser:x:100:root
debug:x:200:debug
guest:x:300:
nobody::99:
ftp::14:
real:x:500:
[root/etc]#
passwd 와 group 파일 내용입니다...
어느부분을 어떻게 손봐야하는지 알려주세요...ㅜㅜ
댓글 달기