OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Vincent Danen (vdanenmandrakesoft.com)
Date: Thu Jan 24 2002 - 12:50:49 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed Jan 23, 2002 at 11:39:39PM +0000, Lier Duh wrote:

    > Ever since I upgraded to proftpd-1.2.5-0.rc1.1.2mdk last night. I can't
    > overwrite an existing file although in the proftpd.conf, I have:
    >
    > <Directory /*>
    > AllowOverwrite on
    > </Directory>
    >
    > Anyone has the same problem?

    The proftpd developers changed things I think in an effort to make it
    more secure. The drawback is that things need to be re-defined. For
    instance, I used to use:

    DefaultRoot /home/www/domain/html user

    and user could write, read, delete, etc. to their heart's content.
    With 1.2.5rc1 this is no longer the case... I had to additionally add
    (for each DefaultRoot defined) the following:

    <Directory /home/www/domain/html/*>
      <Limit WRITE>
        AllowUser user
        DenyAll
      </Limit>
    </Directory>

    In order to allow them to write to the directory (otherwise they were
    being chrooted but not giving permissions, even though the user
    physically owned and had r/w access to the directory. 

    -- 
MandrakeSoft Security, OpenPGP key available on www.keyserver.net
1024D/FE6F2AFD   88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD

    Current Linux kernel 2.4.8-34.1mdk uptime: 1 day 16 hours 53 minutes.

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

    iD8DBQE8UFeJIEPQ5f5vKv0RAo0fAJ98GzaxUBfYuo3jo1rzywezq5JovgCfX1aV 3LYKA7TqF0WOTDm/Ve9Zn+s= =H5E6 -----END PGP SIGNATURE-----