[plug] debian etch + vsftpd does not chroot jail users

Ian Kent raven at themaw.net
Fri Apr 18 16:39:53 WST 2008


On Fri, 2008-04-18 at 09:56 +0800, Denis Brown wrote:
> At 09:14 AM 18/04/2008, Richard Meyer wrote:
> 
> >On Fri, 2008-04-18 at 09:10 +0800, Denis Brown wrote:
> > > At 07:16 PM 17/04/2008, mccabedj wrote:
> > > >Richard Meyer wrote:
> > > >>To prove whether this is correct, bring down the ftp daemon and connect
> 
> <snip>
> 
> >Close your ssh port and use ftp from your windows box - that should give
> >you an idea whether it's working as advertised or not.
> >
> >RM
> 
> Penny finally dropped thanks to several replies :-)
> 
> I had created "ftpuser" rather than "ftpsecure" and as a result it 
> prevented vsftpd from correctly gaoling any users.   Now it works as 
> advertised.   Both from a Win ftp.exe client as well as from FireFox.
> 
> When using psftp.exe however the "ftp" process is bypassing vsftpd and (as 
> I think Richard pointed out) using ssh.

Yeah, you should see an sshd created to handle the sftp connection.

Ian





More information about the plug mailing list