home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!auspex-gw!guy
- From: guy@Auspex.COM (Guy Harris)
- Newsgroups: comp.sys.sun.admin
- Subject: Re: setting up anonymous ftp
- Message-ID: <14062@auspex-gw.auspex.com>
- Date: 14 Aug 92 20:57:42 GMT
- References: <HUDGENS.92Aug13225253@sun13.SCRI.FSU.EDU> <1992Aug14.152748.19844@msuinfo.cl.msu.edu>
- Sender: news@auspex-gw.auspex.com
- Organization: Auspex Systems, Santa Clara
- Lines: 52
- Nntp-Posting-Host: bootme.auspex.com
-
- >I need to know exactly what to do to get "ls" to work
- > ^^^^^^^
- >Now all I get is:
- >
- >crt0: no /usr/lib/ls.so
-
- (Presumably you mean "/usr/lib/ld.so".)
-
- What you need to do to get "ls" to work is to carefully read FTPD(8C),
- paying special attention to the section that reads:
-
- In the last case, ftpd takes special measures to restrict
- the client's access privileges. The server performs a
- chroot(2) command to the home directory of the "ftp" user.
- In order that system security is not breached, it is recom-
- mended that the "ftp" subtree be constructed with care; the
- following rules are recommended.
-
- ~ftp Make the home directory owned by "ftp" and unwrit-
- able by anyone.
-
- ~ftp/bin
- Make this directory owned by the super-user and
- unwritable by anyone. The program ls(1V) must be
- present to support the list commands. This program
- should have mode 111. Since the default /bin/ls
- command is linked with a shared library, so you need
- to set up the files for dynamic linking as well.
-
- ~ftp/usr/lib/ld.so
- the runtime loader must be present and executable.
-
- ~ftp/dev/zero
- used by the runtime loader, create this with the
- command "mknod zero c 3 12".
-
- ~ftp/usr/lib/libc.so.*
- should be a copy of the latest version of the shared
- C library.
-
- ~ftp/etc
- Make this directory owned by the super-user and
- unwritable by anyone. The files passwd(5) and
- group(5) must be present for the ls command to work
- properly. These files should be mode 444.
-
- ~ftp/pub
- Make this directory mode 777 and owned by "ftp".
- Users should then place files which are to be acces-
- sible via the anonymous account in this directory.
-
- and do *everything* it tells you to do.
-