Subject: security audit information

From: Barry Suskind <[email-masked]>
Date: Tue, 16 Jan 1996 16:17:25 -0500

I have downloaded wu-ftpd 2.4 patch level 2.

My question concerns the auditing/security features of the daemon.
I can deny access to for certain types of commands. However, I get
less than desirable results in the syslog file. This is will all users
having "log commands" from the ftpaccess file.

For instance, if one group of users may use the "delete" command, I 
will get an entry for "DELE filename" followed by 
"user of host [ip address] deleted filename"

If the group has the "delete" command revoked with the line
"delete no guest" I still get the "DELE filename", just no information
following to indicate a denial. The user that requested the command
gets information that his request is being denied, and this is fine. I
would just like the server to be able to do the same.

Has anybody modified the code to deal with this?

In addition, has anybody added security features to turn on/off all
the commands the server supports?

barry

|--------------------------|---------------------------------------------|
|Barry A. Suskind          |   "If it weren't for change, your job would |
|GE Information Services   | consist of making sure the corporate abacus |
|Email: [email-masked] | rods were adequately greased" - John Cleese |
|Phone: (301)-340-4667     |---------------------------------------------|
|SnailMail: 401 N Washington St, Mail Stop: MC07D, Rockville MD, 20850   |