[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Configuring ftpd for upload: second phase with chflags



Hi there,

following the question I have posted few hours ago (see thread:
configuring ftpd for upload) & the answers I've got, I used chflags with
uappnd for the /upload directory:
An ls -lo looks like this:
dr-xr-xr-x  3  root   ftp   -   512  Sep  1 12:12  pub
dr-x------   2  root   ftp   -   512   Sep   1  18:34 reserved
drwxrwxrwx   3   root   ftp   uappnd   512   Sep   1   18:41   upload

Even if the perms are 777 on the upload dir, users (including root) can
only list and append to the dir. Is this setting can be considered as
secure ?  Remember that what I want is:
-Allow users to list and append to the upload
-Deny users the right to delete files on upload or upload itself

Thanks in advance for any advice.

--
Saad KADHI -- Security Engineer
---------------------------------
"He who relieves the poor makes Ahura King"