tlug: Fine control over ftp

[Darren Cook <darren@example.com>]

I've a user who has to be able to able to ftp into two directories and
download data files. I don't want him to be able to see anything else.

On NT I use war-ftp, where I'm able to explicitly declare the directories a
user can access, and say he can download but not upload to them.

Is their a unix way to do the same thing? If possible I don't want to
change group ownerships of these files and directories in case it messes up
something else (and because it's one more step to remember if I upload a
new version).

Also, in war-ftp the ftp users are seperate from the NT user accounts,
which might be a pain on a large network but is ideal in situations like
this. I don't want the user to have an email account or telnet access (even
to his two directories). I tried setting his shell to "/bin/false", but
that stopped both ftp and telnet :-(.

Darren

---------------------------------------------------------------
Next Meeting: 10 October, 12:30 Tokyo Station Yaesu central gate
Featuring the IMASY Eng. Team on "IPv6 - The Next Generation IP"
Next Nomikai: 20 November, 19:30  Tengu TokyoEkiMae 03-3275-3691
---------------------------------------------------------------
Sponsor: PHT, makers of TurboLinux http://www.pht.co.jp