[wplug] Anonymous FTP and hidden files (security problem?)
Russ Schneider
russ at sugapablo.com
Wed Sep 10 09:43:22 EDT 2003
Jonathan S. Billings wrote:
> I just wanted to note that 'tftp' and 'ftp' are two completetely
> different protocols, and that 'tftp' isn't also known as anonymous ftp.
Noted.
> I agree with the point though, you shouldn't be able to get shell access
> through your ftp server, so there is no reason to have the standard
> shell rc files and other files created by adduser.
That's what I was thinking, but I wanted to know what others thought.
I'm NOT a security person. I'm still learning.
I did remove those files and anonymous FTP still seems to be working fine.
--
Russ Schneider (a.k.a. Sugapablo)
http://www.sugapablo.com
More information about the wplug
mailing list