ftp permssion issues

[TheKidd]

I have user who are only allowed to access a menu at login via .profile. The .profile permissions are set to 444. However, when connecting via ftp users are accidentally deleting the .profile. Is there a way to tighten down permissions so that users connecting via ftp are not allowed to delete their .profile? I will post to HP-UX forum as well. Thanks is advance for your help.

 

[khalidaaa]

Have a look here:

http://www.unix.com/unix-dummies-questions-answers/22757-protect-profile-accidental-delete.html

Regards,
Khalid

 

[TheKidd]

Thanks for the link khalidaaa, but I didn't find the solution there.

 

[chgwhat]

Did you try changing .profile to root permission 555, and home directory to user:group with perm of 1700.

directory should look like

rwx-----t user


Tony ... aka chgwhat

When in doubt,,, Power out...

 

[TheKidd]

That works in that my users cannot delete the .profile via ftp; however, when logging in normally the menu is not displayed leading me to believe that the .profile is not executing.

 

[chgwhat]

sorry, should be 1755 rwxr-xr-xt


Tony ... aka chgwhat

When in doubt,,, Power out...

 

[TheKidd]

No go. A coworker of mine provided a solution in that when the user ftp via reflections a filter is set so that the only files they see are files beginning with [A-Z,a-z,0-9] so the .profile does not appear.