Page MenuHomeFreeBSD

Provide an option to turn off FTP anonymous usage
Needs ReviewPublic

Authored by joyul_juniper.net on Sep 5 2024, 7:14 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Jan 18, 7:08 AM
Unknown Object (File)
Wed, Jan 15, 2:11 AM
Unknown Object (File)
Dec 18 2024, 8:00 PM
Unknown Object (File)
Dec 12 2024, 8:52 PM
Unknown Object (File)
Nov 23 2024, 9:14 PM
Unknown Object (File)
Nov 21 2024, 8:49 AM
Unknown Object (File)
Nov 19 2024, 11:25 PM
Unknown Object (File)
Nov 19 2024, 5:37 PM
Subscribers

Details

Reviewers
des
Summary

ftpd provides the -n option to disable anonymous FTP access, meaning the username 'ftp' cannot log in to the FTP server without a password stored in the password database. This feature helps prevent users who lack the background knowledge of how this special username 'ftp' conventionally works in FTP from mistakenly creating an account with the username 'ftp,' assuming it behaves like other usernames that require a password to log in to the FTP server, which it does not.

Test Plan

Test steps:

  1. Create an "ftp" username account.
  2. Start ftpd with the -n option.
  3. Make sure the username 'ftp' can only log in when the password stored in the database is provided.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 61125
Build 58009: arc lint + arc unit

Event Timeline

joyul_juniper.net created this revision.
des requested changes to this revision.Sep 6 2024, 6:48 PM
des added inline comments.
libexec/ftpd/ftpd.8
28

Bump

libexec/ftpd/ftpd.c
295

Please keep options sorted in alphabetical order.

This revision now requires changes to proceed.Sep 6 2024, 6:48 PM
libexec/ftpd/ftpd.8
28

Still needs bumping.

joyul_juniper.net retitled this revision from Provide an option to turn off FTP anonymous usage to Provide an option to turn off FTP anonymous usage.

Updated patch to D46547