Subject: Upload security

From: Daniel Leroux <[email-masked]>
Date: Mon, 10 Jun 1996 16:00:26 -0400

Hello, 

I am trying to ehnhance security
on my ftp site, by using the "upload"
control in the "ftpaccess" file.

My goal is that once a file has been uploaded
to the server, I want it to be "owned" by a particular
user and being group other.

So I put this line in the "ftpaccess" file
but it doesn't seem to work properly.

upload  /pub/incoming   pdb_depot       yes     "special_user_name"      other   0600

(but the rest of the stuff in "ftpaccess" works properly!)

Thanks in advance
Daniel
-- 

Daniel Leroux                      E-Mail:[email-masked]
GROUPE INTERUNIVERSITAIRE EN ARCHITECTURE DES ORDINATEURS ET VLSI
GRIAO - IRO
Pavillon Andre-Aisenstadt, local 3226
2900 Edouard-Montpetit
C.P. 6128, Succ. centre-ville
Montreal, Quebec  H3C 3J7

tel: 343-6111 (ext.3545) fax: 343-5834
http://www.iro.umontreal.ca/people/leroux

---

From: Michael Brennen <[email-masked]>
Date: Mon, 10 Jun 1996 15:16:49 -0500 (CDT)

> control in the "ftpaccess" file.

...

> upload  /pub/incoming pdb_depot yes "special_user_name" other 0600

I'm not sure what your absolute paths are, but make the second parameter
(the one after the "upload") the absolute path to the ftp home directory. 
Make the third parameter the relative path within that directory.  An
example is below.  Use the nodirs, also.

upload  /home/ftp/  /incoming    yes  user_name  group_name  0400 nodirs

   -- Michael