Hi all,
Can someone help me with creating user with special privilegies?
I need to create user who will have access ONLY to one folder (like /etc/log/) through ftp (read only access) and which will not have any other ways to log in like telnet, ssh etc.?
You'll have to detail which FTP daemon you're using, as chroot'ing is common to many, but their configs differ.
You could look at vsftpd if you have the option of configuring the FTP server from scratch:
vsftpd - Secure, fast FTP server for UNIX-like systems
For the shell. /bin/false is usually enough to stop interactive logins via ssh, telnet, ...
I am sorry for stupid question, but how to check which ftp daemon I am using?
And another question - can I get any problems after installing vsftpd at the system?
You can begin by mentioning the O/S you're running-
-bash-3.00# cat /etc/release
Solaris 10 10/08 s10s_u6wos_07b SPARC
Copyright 2008 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 27 October 2008
-bash-3
Ah, good - you should be able to edit the ftpd inetd entry with inetadm to use the options:
-r (rootdir of the FTP session - see the chroot(2) manpage)
-a (allows the use of ftpaccess - see the ftpaccess(4) manpage)
Both of these things should enhance the security of your FTP sessions somewhat.