HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   regarding proftpd and users with shell access (http://www.howtoforge.com/forums/showthread.php?t=1538)

Ovidiu 5th December 2005 10:03

regarding proftpd and users with shell access
 
Hi guys,

using debian 3.1, setup accordingly to the eprfect debian setup and using ispconfig.

I got a report from tiger :

Quote:

# Checking listening processes
NEW: --WARN-- [lin003w] The process `proftpd' is listening on socket 40492 (TCP on
81.169.176.18 interface) is run by web19_tibi.
now my question is how can a user with shell access (web19_tibi) be the owner of the listening proftpd deamon?
Or is this a normal behaviour?

till 5th December 2005 10:43

If i remember correctly, proftpd itself is running as root, if someone connects, a child process is spawned, the child access drops priveliges and runs as the user that has connected until the ftp connection ends.

So i think this report is OK.

Ovidiu 5th December 2005 13:03

ok thx.
I was investigating this as proftpd disconnects after severall seconds due to an glibc error I described in another post here in the forum. I'll try and downgrade the libc6 to another version, hopefully proftpd will work again.


All times are GMT +2. The time now is 13:01.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.