[Debian-sf-devel] [Patch #274] Chroot removed and anonftp fix

[nobody]

Patch #274 has been updated. 

Project: 
Category: None
Status: Open
Summary: Chroot removed and anonftp fix

Follow-Ups:

Date: 2002-Apr-22 23:20
By: osvaldsson

Comment:
Removed all Chroot stuff.

Removed download dir and fixed that into the anonftp dir so that the project 
files could both be downloaded through ftp and http.
I also fixed the anon-ftp login.

I put the cvsroot as /cvsroot as changing that means a lot more recoding and 
text editing, if that is to be then it has to be a sepperate phase.

I also removed hardcoded paths where I could in the code I was editing.


-------------------------------------------------------

Date: 2002-Apr-23 17:03
By: ru2def

Comment:
please elaborate the reason for this patch ... i'm not seeing why this would be 
beneficial? (not that i really have any say in the package, i'm just trying to 
understand :) ... the chroot'd envrionment allows for greater security of your 
user accounts, the FTP server (can't get to system files), etc... also makes it 
easy to put all SF user accounts on their own partition, or separate 
partitions, without mucking about in /home (which is more for *local* users) 
... also makes offsite backup more convenient (just tar up the chroot space) ...
-------------------------------------------------------

Date: 2002-Apr-23 19:45
By: osvaldsson

Comment:
This patch was submited after a discussion with the maintainers.

The ftp server is still chrooted.
The current setup breaks the CVS access and the anonftp didn't point at 
anything at all.
The only thing the current setup did was chroot the anoncvs access, and has 
seperate upload dirs for each user, I don't think that is necesary and having 
all users upload to a common upload dir (unable to change files, just upload) 
wich is btw. in its own chroot within proftpd like the anonftp doesn't affect 
security at all.

Did you look at the patch at all?


-------------------------------------------------------

-------------------------------------------------------
For more info, visit:

http://savannah.gnu.org/patch/?func=detailpatch&patch_id=274&group_id=259