Re: [PLUG] Setting SFTP restrictions to download only, but only for cert

Re: [PLUG] Setting SFTP restrictions to download only, but only for certain users

I will try that tomorrow, I have an existing test account I can try using. At the moment it has RW rights to its home file, this will be a good test to see if this will stop then deleting, regardless if they have rights to the folder or not.

--
Hand crafted specially for you, on a Samsung Galaxy S5, now running on Android 5.0.

On Aug 6, 2015 4:24 PM, "Michael Lazin" <microlaser@gmail.com> wrote:

You would simply need to add DELE next to STOR to limit deletes.

On Thu, Aug 6, 2015 at 3:28 PM, Michael Leone <turgon@mike-leone.com> wrote:
On Thu, Aug 6, 2015 at 3:24 PM, Michael Lazin <microlaser@gmail.com> wrote:
> The .ftpaccess is recursive, so if you put it on a directory that's served
> up on the web it will effect directories beneath it.

Hmm! So if I made a folder structure like - /Project/<userA>,
/Project/<userB> - and put this .ftpaccess file in /Project, then it
applies to ~/<userA>, etc. Useful!

> I tested this by
> putting it in a user's public_html directory on a debian server and
> attempting to transfer a file as that user via scp. I got permission
> denied. I have used ftp access files many times to limit ftp users rights
> but was unsure if it worked with scp too. Apparently it does. It does not
> prevent the user from connecting via ssh and deleting it however, unless it
> belonged to root or another user or group they don't have rights to.

Hrm. There's an issue - apparently we'd prefer them NOT to be able to
delete the files, either. We put the file; they read (i.e., download)
it; we come back and delete it.
Lather, rinse, repeat.

I may need to set the perms on each file I put out there to be
read-only for that user, and read-write for the group I am logged in
with.

___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug

--
Michael Lazin

to gar auto estin noein te kai ennai

___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug