Subject: secure upload problems

From: Craig Stratton <[email-masked]>
Date: Wed, 7 Aug 1996 12:47:14 +0100 ()

Hi, I have BSDI 2.0.1 running beta-11 wu-ftpd.
I am trying to create a secure upload directory for a 
user with the following guidelines.

User1 can log on and access from ~ dir onwards.
User2 should be able to log into user1 ~/upload and 
upload files, but not be able to list ~/upload, or list 
anything else in ~ or onwards.

Hope that is clear.

User1 and user2 are both set up and chroot to ~user1, 
with user2 cd'ing into ~/upload via entry in passwd file.

User1 belongs to group1 and user2 belongs to group2.

All files/dirs in ~user1 are owned by user1 and group1.
Nothing is world readable except ~/etc/group and passwd.
Nothing is world writable except ~/upload.

The current position is that user1 can log in and ftp in 
and out where required.
User2 logs in and is cd'ed into ~/upload okay.
pwd gives permission denied. ls gives no files even if 
there are, so ok.
User2 can go up to ~/ and into any subdirs if the name is 
known, but cannot see anything, so ok. 
But, user2 cannot upload any files into the upload 
directory.
The message i get is :-

ftp> put readme.txt
200 PORT command successful.
553 Could not determine cwdir: Permission denied.

The only alternative i can see at present is to create 
etc and bin dirs in ~user1/upload and chroot user2 to 
there, but it seems a bit extreme to me.

Anyone have any suggestions ?

Regards, Craig Stratton.