Page MenuHomeFreeBSD

Provide an option to turn off FTP anonymous usage
ClosedPublic

Authored by joyul_juniper.net on Sep 5 2024, 7:14 PM.
Tags
None
Referenced Files
F132181919: D46547.id.diff
Tue, Oct 14, 1:19 PM
F132168301: D46547.diff
Tue, Oct 14, 9:45 AM
Unknown Object (File)
Mon, Oct 13, 11:17 AM
Unknown Object (File)
Mon, Oct 13, 11:17 AM
Unknown Object (File)
Mon, Oct 13, 11:17 AM
Unknown Object (File)
Mon, Oct 13, 11:16 AM
Unknown Object (File)
Mon, Oct 13, 2:40 AM
Unknown Object (File)
Sun, Oct 12, 10:40 PM
Subscribers

Details

Summary

ftpd provides the -n option to disable anonymous FTP access, meaning the username 'ftp' cannot log in to the FTP server without a password stored in the password database. This feature helps prevent users who lack the background knowledge of how this special username 'ftp' conventionally works in FTP from mistakenly creating an account with the username 'ftp,' assuming it behaves like other usernames that require a password to log in to the FTP server, which it does not.

Test Plan

Test steps:

  1. Create an "ftp" username account.
  2. Start ftpd with the -n option.
  3. Make sure the username 'ftp' can only log in when the password stored in the database is provided.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

joyul_juniper.net created this revision.
des requested changes to this revision.Sep 6 2024, 6:48 PM
des added inline comments.
libexec/ftpd/ftpd.8
28

Bump

libexec/ftpd/ftpd.c
295

Please keep options sorted in alphabetical order.

This revision now requires changes to proceed.Sep 6 2024, 6:48 PM
libexec/ftpd/ftpd.8
28

Still needs bumping.

joyul_juniper.net retitled this revision from Provide an option to turn off FTP anonymous usage to Provide an option to turn off FTP anonymous usage.

Updated patch to D46547

Sorry, I lost track of this.

libexec/ftpd/ftpd.8
37
This revision is now accepted and ready to land.Jun 26 2025, 12:07 PM