Bugtraq mailing list archives

Re: Re: Bad Advise


From: pwh () bradley bradley edu (Pete Hartman)
Date: Tue, 26 Jul 94 15:46:07 -0500


Christopher W. Klaus wrote:
% Here is some advise from Sun that I highly recommend you DO NOT DO.
%           Make the home directory owned by ``ftp'' and unwritable
%           by anyone. 
% I highly recommend you change that to owned by ``root''.  
I was thinking about ownership of the whole ftp-tree by user `nobody'. Are
there any benefits to using `root' instead of `nobody'?

Seems that since NFS access defaults to "nobody" that this is probably
the most insecure possible permission if someone can get nfs access to
the tree.



Current thread: