Re: Security problems

1999-07-18 Thread Ernest Johanson
You can do this with proftpd. There is a DefaultRoot directive that will chroot to a dir on a per-group basis. I have the same situation with a group of web publishers. The first step was to define a virtual host (this particular server is restricted to internal use only). Then each user is added t

Re: Security problems

1999-07-18 Thread Carl Mummert
Hopefully this gets back to whoever asked originally.. You could roll a solution using chroot() to move the user into their home dir - all it costs is the disk space to recreate the bin and lib trees. Carl

Re: Security problems

1999-07-18 Thread Pollywog
On 18-Jul-99 John Foster wrote: > That is all handled via granting permissions to their /home directories > and establishing a path for these users that allows the access to only > those prgs that you want them to use. If a user knows the path to some program that is not in their path, could they

Re: Security problems

1999-07-18 Thread John Foster
lena wrote: > > Hello! > > I am a newbie with administrating my own Debian server, and got problems > that got to do with security. > > I have 20 different users that got both ftp and telnet access to the server > /using it for web publishing/. I would like to add they got access to their > root

Re: Security problems

1999-07-17 Thread Martin Bialasinski
>> "Andrei" == Andrei Ivanov <[EMAIL PROTECTED]> wrote: >> You can instead deny them telnet access in /etc/hosts.deny >> with something like: >> >> in.telnetd: ALL Andrei> That would refuse telnet access to everyone, and she would not be able to Andrei> telnet to the box from somewhere else to

Re: Security problems

1999-07-17 Thread Martin Bialasinski
>> "lena" == lena <[EMAIL PROTECTED]> wrote: lena> I am a newbie with administrating my own Debian server, and got problems lena> that got to do with security. If you are new to this, go to your local bookshop, and check the "Practical UNIX & Internet Security" (O'Reilly). Especially if your l

RE: Security problems

1999-07-17 Thread Andrei Ivanov
> You can instead deny them telnet access in /etc/hosts.deny > with something like: > > in.telnetd: ALL That would refuse telnet access to everyone, and she would not be able to telnet to the box from somewhere else to administer it (if needed). So change the shells. Andrew -

RE: Security problems

1999-07-17 Thread Pollywog
On 17-Jul-99 lena wrote: > Hello! > > I am a newbie with administrating my own Debian server, and got problems > that got to do with security. > > I have 20 different users that got both ftp and telnet access to the server > /using it for web publishing/. I would like to add they got access to t

Re: security problems in innd

1999-05-26 Thread Jens Ritter
Pere Camps <[EMAIL PROTECTED]> writes: > Hi! > > I've just installed innd and besides the tipical allowing of > access for some hosts that I guess it must exists, are there any other > security considerations I should follow? Well this is not easily answered, to be more exact a complete an