Re: Best practice vsftpd writable root inside chroot()

2013-08-09 Thread Bob Proulx
Maik Stubbe wrote: > I need full access from all clients to their home directory > including uploads. I'm aware of the security risks using ftp. But > there isn't another option like sftp. ~60 clients with a minimum of > knowledge of security risks and technical understanding. It will be > a hard a

Re: Best practice vsftpd writable root inside chroot()

2013-08-09 Thread Maik Stubbe
> > 1. Using no ftp -> no chance > > You didn't say but are you using ftp for upload access? Since ftp > sends passwords in the clear it is unsuitable in these days of a > hostile Internet for any purpose other than anonymous downloading. > I need full access from all clients to their home dire

Re: Best practice vsftpd writable root inside chroot()

2013-08-08 Thread Bob Proulx
Maik Stubbe wrote: > I just came accross this new security feature of vsftpd whith which > you cannot have your $HOME writable for a chrooted user. If the chroot file system is writable then that has the same security issues as a writable root filesystem. Which is to say it has no security. Simp

Best practice vsftpd writable root inside chroot()

2013-08-08 Thread Maik Stubbe
Hi, I just came accross this new security feature of vsftpd whith which you cannot have your $HOME writable for a chrooted user. Since this ftp server is a public accessable server with ~60 users and partial nested homedirs, there is no chance that there is no writable homedirectory. Another b