Assorted mdoc(7) fixes.
This commit is contained in:
parent
9be025500d
commit
052a8966eb
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=115634
@ -29,7 +29,7 @@
|
|||||||
.Os
|
.Os
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
.Nm ftpchroot
|
.Nm ftpchroot
|
||||||
.Nd list users and groups subject to FTP access restrictions
|
.Nd "list users and groups subject to FTP access restrictions"
|
||||||
.Sh DESCRIPTION
|
.Sh DESCRIPTION
|
||||||
The file
|
The file
|
||||||
.Nm
|
.Nm
|
||||||
@ -38,7 +38,8 @@ is read by
|
|||||||
at the beginning of an FTP session, after having authenticated the user.
|
at the beginning of an FTP session, after having authenticated the user.
|
||||||
Each line in
|
Each line in
|
||||||
.Nm
|
.Nm
|
||||||
corresponds to a user or group. If a line in
|
corresponds to a user or group.
|
||||||
|
If a line in
|
||||||
.Nm
|
.Nm
|
||||||
matches the current user or a group he is a member of,
|
matches the current user or a group he is a member of,
|
||||||
access restrictions will be applied to this
|
access restrictions will be applied to this
|
||||||
@ -53,13 +54,13 @@ Fields on each line are separated by tabs or spaces.
|
|||||||
.Pp
|
.Pp
|
||||||
The first field specifies a user or group name.
|
The first field specifies a user or group name.
|
||||||
If it is prefixed by an
|
If it is prefixed by an
|
||||||
.Qq at
|
.Dq at
|
||||||
sign,
|
sign,
|
||||||
.Ql \&@ ,
|
.Ql @ ,
|
||||||
it specifies a group name;
|
it specifies a group name;
|
||||||
the line will match each user who is a member of this group.
|
the line will match each user who is a member of this group.
|
||||||
As a special case, a single
|
As a special case, a single
|
||||||
.Ql \&@
|
.Ql @
|
||||||
in this field will match any user.
|
in this field will match any user.
|
||||||
A username is specified otherwise.
|
A username is specified otherwise.
|
||||||
.Pp
|
.Pp
|
||||||
@ -70,23 +71,23 @@ Be it omitted, the user's login directory will be used.
|
|||||||
If it is not an absolute pathname, then it will be relative
|
If it is not an absolute pathname, then it will be relative
|
||||||
to the user's login directory.
|
to the user's login directory.
|
||||||
If it contains the
|
If it contains the
|
||||||
.Qq \&/./
|
.Pa /./
|
||||||
seprator,
|
separator,
|
||||||
.Xr ftpd 8
|
.Xr ftpd 8
|
||||||
will treat its left-hand side as the name of the directory to do
|
will treat its left-hand side as the name of the directory to do
|
||||||
.Xr chroot 2
|
.Xr chroot 2
|
||||||
to, and its right-hand side to change the current directory to afterwards.
|
to, and its right-hand side to change the current directory to afterwards.
|
||||||
.Sh FILES
|
.Sh FILES
|
||||||
.Bl -tag -width /etc/ftpchroot -compact
|
.Bl -tag -width ".Pa /etc/ftpchroot" -compact
|
||||||
.It Pa /etc/ftpchroot
|
.It Pa /etc/ftpchroot
|
||||||
.El
|
.El
|
||||||
.Sh EXAMPLES
|
.Sh EXAMPLES
|
||||||
These lines in
|
These lines in
|
||||||
.Nm
|
.Nm
|
||||||
will lock up the user
|
will lock up the user
|
||||||
.Qq webuser
|
.Dq Li webuser
|
||||||
and each member of the group
|
and each member of the group
|
||||||
.Qq hostee
|
.Dq Li hostee
|
||||||
in their respective login directories:
|
in their respective login directories:
|
||||||
.Bd -literal -offset indent
|
.Bd -literal -offset indent
|
||||||
webuser
|
webuser
|
||||||
@ -96,26 +97,24 @@ webuser
|
|||||||
And this line will tell
|
And this line will tell
|
||||||
.Xr ftpd 8
|
.Xr ftpd 8
|
||||||
to lock up the user
|
to lock up the user
|
||||||
.Qq joe
|
.Dq Li joe
|
||||||
in
|
in
|
||||||
.Pa /var/spool/ftp
|
.Pa /var/spool/ftp
|
||||||
and then to change the current directory to
|
and then to change the current directory to
|
||||||
.Pa /joe ,
|
.Pa /joe ,
|
||||||
which is relative to the session's new root:
|
which is relative to the session's new root:
|
||||||
.Bd -literal -offset indent
|
.Pp
|
||||||
joe /var/spool/ftp/./joe
|
.Dl "joe /var/spool/ftp/./joe"
|
||||||
.Ed
|
|
||||||
.Pp
|
.Pp
|
||||||
And finally the following line will lock up every user connecting
|
And finally the following line will lock up every user connecting
|
||||||
through FTP in his respective
|
through FTP in his respective
|
||||||
.Pa \&~/public_html ,
|
.Pa ~/public_html ,
|
||||||
thus lowering possible impact on the system
|
thus lowering possible impact on the system
|
||||||
from intrinsic insecurity of FTP:
|
from intrinsic insecurity of FTP:
|
||||||
.Bd -literal -offset indent
|
.Pp
|
||||||
@ public_html
|
.Dl "@ public_html"
|
||||||
.Ed
|
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
.Xr chroot 2 ,
|
.Xr chroot 2 ,
|
||||||
.Xr group 5 ,
|
.Xr group 5 ,
|
||||||
.Xr passwd 5 ,
|
.Xr passwd 5 ,
|
||||||
.Xr ftpd 8 .
|
.Xr ftpd 8
|
||||||
|
Loading…
Reference in New Issue
Block a user