[plug] debian etch + vsftpd does not chroot jail users
Ian Kent
raven at themaw.net
Fri Apr 18 16:39:53 WST 2008
On Fri, 2008-04-18 at 09:56 +0800, Denis Brown wrote:
> At 09:14 AM 18/04/2008, Richard Meyer wrote:
>
> >On Fri, 2008-04-18 at 09:10 +0800, Denis Brown wrote:
> > > At 07:16 PM 17/04/2008, mccabedj wrote:
> > > >Richard Meyer wrote:
> > > >>To prove whether this is correct, bring down the ftp daemon and connect
>
> <snip>
>
> >Close your ssh port and use ftp from your windows box - that should give
> >you an idea whether it's working as advertised or not.
> >
> >RM
>
> Penny finally dropped thanks to several replies :-)
>
> I had created "ftpuser" rather than "ftpsecure" and as a result it
> prevented vsftpd from correctly gaoling any users. Now it works as
> advertised. Both from a Win ftp.exe client as well as from FireFox.
>
> When using psftp.exe however the "ftp" process is bypassing vsftpd and (as
> I think Richard pointed out) using ssh.
Yeah, you should see an sshd created to handle the sftp connection.
Ian
More information about the plug
mailing list