Subject: Anonymous ftp and the "ls" command.

From: "Pedro I. Sanchez" <[email-masked]>
Date: Wed, 11 Sep 1996 16:11:22 -0400 (EDT)

Hello,

I have debian 1.1 and I installed an anonymous ftp service. It works fine
except for an annoying problem: ftp users can always see the files in the
ftp site even though there is no "ls" binary under the bin directory of
~ftp.

I understand that ftp users will only be able to execute commands with
valid binaries under ~ftp/bin. So if there is no ~ftp/bin/ls there
shouldn't be a way to see the directory structure. Am I wrong?

I'd appreciate any hint on this.

Thank you,

Pedro Ivan
----------

---

From: "Brian C. White" <[email-masked]>
Date: Wed, 11 Sep 1996 21:10:03 -0400

> ftp site even though there is no "ls" binary under the bin directory of

The "chroot" is only done for _anonymous_ ftp and thus only this login
has limited command access.  All other userids will run with the standard
commands in /bin.
                                             
                                          Brian
                                 ( [email-masked] )
                                             
-------------------------------------------------------------------------------
  Want to get it together?  We can help!  http://www.verisim.com/coordinator/

---

From: "Pedro I. Sanchez" <[email-masked]>
Date: Thu, 12 Sep 1996 09:58:06 -0400

This is exactly my problem. The _anonymous_ users still can use the "ls"
command even though there is no ~ftp/bin/ls binary! How's that possible?

Pedro Ivan
----------

---

From: Mark Eichin <[email-masked]>
Date: 13 Sep 1996 14:25:19 -0400

doesn't wu-ftpd use builtin code for simple ls?

---

From: "Pedro I. Sanchez" <[email-masked]>
Date: Fri, 13 Sep 1996 15:52:59 -0400

> doesn't wu-ftpd use builtin code for simple ls?

I don't know but I haven't installed wu-ftpd myself, only the standard
ftpd that comes with the netstd package. Maybe the solution to my
problem is just to install this package.

Pedro Ivan
----------