Re: Uploaded fsp 2.71-9 (source i386) to master
On Fri, 20 Nov 1998, Pierre Beyssac wrote:
> On Thu, Nov 19, 1998 at 10:41:57PM -0800, Robert Stone wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > * bug #29723 resolved (glibc-2.1 port problem)
> > * bug #29745 resolved (/home/ftp permissions)
>
> I haven't seen the change, maybe it's effected differently than it
> looks from the above log line, but IMHO just fixing /home/ftp
> permissions is only asking for more trouble later.
>
> The ftp user should NOT be created, period. Because this activates
> anonymous FTP, which should NEVER be activated (by this, I mean it
> should never accept an anonymous ftp connection) unless the
> administrator _explicitly_ requests it.
>
> That this doesn't result in a usable anonymous FTP configuration is,
> IMHO, not enough of a correction.
I was assured by the base-passwd maintainer that the ftp user
would be part of debian's base /etc/passwd file at some point and in
discussion with the proftpd, wu-ftpd, and wu-ftpd-academ maintainers it
was decided that as a temporary fix we should all be creating the ftp user
via "adduser --system ..." until ftp made it into base-passwd. If the
ftpd in netstd is enabled by the presence of user "ftp" I think that's the
oddball software, the other ftp servers don't act like that, and that's
probably why the base-passwd maintainer hasn't been able to add the "ftp"
user to /etc/passwd.
thanks,
Robert
Reply to: