tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: chrooted ftpd?



On Thu, Jun 23, 2011 at 03:15:01AM +0000, Christos Zoulas wrote:
> >
> >Turns out getpwent() refuses to even _try_ to read spwd.db unless
> >geteuid() returns zero!!  And, as far as I can tell, ftpd has no way to
> >have it use anything but getpwent() to get passwords.
> 
> I think this can be argued to be a bug, but I bet it is there to protect
> the user.

It's a bug.  It would break the chroot environments on our own servers
in many cases if this version of the code were deployed there.

Thor


Home | Main Index | Thread Index | Old Index