Comments on: Allowing FTP access to files outside the home directory chroot http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/ The Journal Of A Linux Sysadmin Thu, 09 Feb 2012 03:50:59 +0000 hourly 1 http://wordpress.org/?v=3.3 By: Setting up Ubuntu/WordPress on Amazon EC2 – Part 2http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193711 Setting up Ubuntu/WordPress on Amazon EC2 – Part 2 Wed, 07 Dec 2011 21:14:01 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193711 [...] Finally because the main reason I wanted FTP access was to easily edit the CSS running in the WordPress themes I wanted to make /var/www/wordpress/wp-content available via the FTP connection. The hardening rules above lock FTP access to your home directory, so how do you work around this? The answer strangely enough is to mount the relevant directory in your home directory (as described at http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/): [...] [...] Finally because the main reason I wanted FTP access was to easily edit the CSS(link) (Cascading Style Sheets) running in the WordPress themes I wanted to make /var/www/wordpress/wp-content available via the FTP connection. The hardening rules above lock FTP access to your home directory, so how do you work around this? The answer strangely enough is to mount the relevant directory in your home directory (as described at http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/): [...]

]]> By: Ahmadiradhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193668 Ahmadirad Mon, 14 Nov 2011 12:09:26 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193668 Dear all when i use command " mount --bind /var/www/html/files/download/ /var/www/html/images/download_dir/" i receive error "mount: special device /var/www/html/files/download/ does not exist". please help me. Dear all
when i use command ” mount –bind /var/www/html/files/download/ /var/www/html/images/download_dir/” i receive error “mount: special device /var/www/html/files/download/ does not exist”.
please help me.

]]> By: esmhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193648 esm Mon, 31 Oct 2011 21:05:31 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193648 Great article... Makes for an easy setup to accomplish this without complex configuration or changing FTP servers. Thanks. Great article… Makes for an easy setup to accomplish this without complex configuration or changing FTP servers. Thanks.

]]> By: This Sunday weblog: sFTP, Samba, vsftpd chroot all in Oneiric Ocelot [links] « Pikir dan Rasahttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193614 This Sunday weblog: sFTP, Samba, vsftpd chroot all in Oneiric Ocelot [links] « Pikir dan Rasa Sun, 16 Oct 2011 08:11:31 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193614 [...] www.ducea.com … allowing-ftp-access-to-files-outside-the-home-directory-chroot/ [...] [...] http://www.ducea.com … allowing-ftp-access-to-files-outside-the-home-directory-chroot/ [...]

]]> By: SELinuxhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193577 SELinux Thu, 29 Sep 2011 16:25:06 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193577 I had the same issue. After mounting the remote folder in the users' home directory, I was still unable to access the files. If you use ftpd try setsebool -P allow_ftpd_full_access 1 and if you use vsftpd setsebool -P sftpd_full_access 1You may also have to do setsebool -P ftp_home_dir 1 to allow ftp to cd to /home/user in the fisrt place.J.D. I had the same issue. After mounting the remote folder in the users’ home directory, I was still unable to access the files.
If you use ftpd try
setsebool -P allow_ftpd_full_access 1
and if you use vsftpd
setsebool -P sftpd_full_access 1

You may also have to do setsebool -P ftp_home_dir 1
to allow ftp to cd to /home/user in the fisrt place.

J.D.

]]> By: FTP upload & overwrite does NOT overwite, but creates [file.ext].# insteadhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193454 FTP upload & overwrite does NOT overwite, but creates [file.ext].# instead Sat, 10 Sep 2011 13:10:30 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193454 [...] ftp access for everyone, and in order for FTP to access /srv/www/, I have used the instructions on this site to mount /srv/www/ inside /home/[user]/ftp/ using the bind operation. Ergo, FTP access is chrooted [...] [...] ftp access for everyone, and in order for FTP to access /srv/www/, I have used the instructions on this site to mount /srv/www/ inside /home/[user]/ftp/ using the bind operation. Ergo, FTP access is chrooted [...]

]]> By: preyo999http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193410 preyo999 Mon, 05 Sep 2011 20:20:55 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193410 Thanks it saved our time :) Thanks it saved our time :)

]]> By: fitzhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193351 fitz Fri, 26 Aug 2011 15:57:15 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193351 Great, I'll give it a try this evening. Thanks again Marius, really appreciate your assistance. Great, I’ll give it a try this evening. Thanks again Marius, really appreciate your assistance.

]]> By: - Marius -http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193350 - Marius - Fri, 26 Aug 2011 15:32:20 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193350 @fitz: you could use something like this: chmod -R g+w folder if you want to give group write permissions on the folder and its content. If you want to give write permissions to eveyone use: g+w,o+w @fitz: you could use something like this:
chmod -R g+w folder
if you want to give group write permissions on the folder and its content. If you want to give write permissions to eveyone use: g+w,o+w

]]> By: fitzhttp://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/comment-page-3/#comment-193349 fitz Fri, 26 Aug 2011 15:14:46 +0000 http://www.ducea.com/2006/07/27/allowing-ftp-access-to-files-outside-the-home-directory-chroot/#comment-193349 Thanks for your suggestion Marius, I appreciate you replying about this. I checked the properties of the folder in the FTP program and the Group and Global Write checkboxes were unchecked. But after I checked them and tried to send the file I got the same permission denied message. When I checked the folder properties again, the Write checkboxes were unchecked again, so I guess it didn't save. Is there a command line to modify permissions on the server for that folder? Thanks for your suggestion Marius, I appreciate you replying about this. I checked the properties of the folder in the FTP program and the Group and Global Write checkboxes were unchecked. But after I checked them and tried to send the file I got the same permission denied message. When I checked the folder properties again, the Write checkboxes were unchecked again, so I guess it didn’t save. Is there a command line to modify permissions on the server for that folder?

]]>