Assorted mdoc(7) fixes.

This commit is contained in:
Ruslan Ermilov 2003-06-01 19:52:36 +00:00
parent 9be025500d
commit 052a8966eb
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=115634

View File

@ -29,7 +29,7 @@
.Os .Os
.Sh NAME .Sh NAME
.Nm ftpchroot .Nm ftpchroot
.Nd list users and groups subject to FTP access restrictions .Nd "list users and groups subject to FTP access restrictions"
.Sh DESCRIPTION .Sh DESCRIPTION
The file The file
.Nm .Nm
@ -38,7 +38,8 @@ is read by
at the beginning of an FTP session, after having authenticated the user. at the beginning of an FTP session, after having authenticated the user.
Each line in Each line in
.Nm .Nm
corresponds to a user or group. If a line in corresponds to a user or group.
If a line in
.Nm .Nm
matches the current user or a group he is a member of, matches the current user or a group he is a member of,
access restrictions will be applied to this access restrictions will be applied to this
@ -53,13 +54,13 @@ Fields on each line are separated by tabs or spaces.
.Pp .Pp
The first field specifies a user or group name. The first field specifies a user or group name.
If it is prefixed by an If it is prefixed by an
.Qq at .Dq at
sign, sign,
.Ql \&@ , .Ql @ ,
it specifies a group name; it specifies a group name;
the line will match each user who is a member of this group. the line will match each user who is a member of this group.
As a special case, a single As a special case, a single
.Ql \&@ .Ql @
in this field will match any user. in this field will match any user.
A username is specified otherwise. A username is specified otherwise.
.Pp .Pp
@ -70,23 +71,23 @@ Be it omitted, the user's login directory will be used.
If it is not an absolute pathname, then it will be relative If it is not an absolute pathname, then it will be relative
to the user's login directory. to the user's login directory.
If it contains the If it contains the
.Qq \&/./ .Pa /./
seprator, separator,
.Xr ftpd 8 .Xr ftpd 8
will treat its left-hand side as the name of the directory to do will treat its left-hand side as the name of the directory to do
.Xr chroot 2 .Xr chroot 2
to, and its right-hand side to change the current directory to afterwards. to, and its right-hand side to change the current directory to afterwards.
.Sh FILES .Sh FILES
.Bl -tag -width /etc/ftpchroot -compact .Bl -tag -width ".Pa /etc/ftpchroot" -compact
.It Pa /etc/ftpchroot .It Pa /etc/ftpchroot
.El .El
.Sh EXAMPLES .Sh EXAMPLES
These lines in These lines in
.Nm .Nm
will lock up the user will lock up the user
.Qq webuser .Dq Li webuser
and each member of the group and each member of the group
.Qq hostee .Dq Li hostee
in their respective login directories: in their respective login directories:
.Bd -literal -offset indent .Bd -literal -offset indent
webuser webuser
@ -96,26 +97,24 @@ webuser
And this line will tell And this line will tell
.Xr ftpd 8 .Xr ftpd 8
to lock up the user to lock up the user
.Qq joe .Dq Li joe
in in
.Pa /var/spool/ftp .Pa /var/spool/ftp
and then to change the current directory to and then to change the current directory to
.Pa /joe , .Pa /joe ,
which is relative to the session's new root: which is relative to the session's new root:
.Bd -literal -offset indent .Pp
joe /var/spool/ftp/./joe .Dl "joe /var/spool/ftp/./joe"
.Ed
.Pp .Pp
And finally the following line will lock up every user connecting And finally the following line will lock up every user connecting
through FTP in his respective through FTP in his respective
.Pa \&~/public_html , .Pa ~/public_html ,
thus lowering possible impact on the system thus lowering possible impact on the system
from intrinsic insecurity of FTP: from intrinsic insecurity of FTP:
.Bd -literal -offset indent .Pp
@ public_html .Dl "@ public_html"
.Ed
.Sh SEE ALSO .Sh SEE ALSO
.Xr chroot 2 , .Xr chroot 2 ,
.Xr group 5 , .Xr group 5 ,
.Xr passwd 5 , .Xr passwd 5 ,
.Xr ftpd 8 . .Xr ftpd 8