FTPUSERS(5) Standards, Environments, and Macros FTPUSERS(5)
NAME
ftpusers - file listing users to be disallowed ftp login privileges
SYNOPSIS
/etc/ftpd/ftpusersDESCRIPTION
The
ftpusers file lists users for whom
ftp login privileges are
disallowed. Each
ftpuser entry is a single line of the form:
name
where
name is the user's login name.
The FTP Server,
in.ftpd(8), reads the
ftpusers file. If the login name of
the user matches one of the entries listed, it rejects the login attempt.
The
ftpusers file has the following default configuration entries:
root
daemon
bin
sys
adm
lp
uccp
nuucp
smmsp
listen
nobody
noaccess
nobody4
These entries match the default instantiated entries from
passwd(5). The
list of default entries typically contains the superuser
root and other
administrative and system application identities.
The root entry is included in the
ftpusers file as a security measure
since the default policy is to disallow remote logins for this identity.
This policy is also set in the default value of the
CONSOLE entry in the
/etc/default/login file. See
login(1). If you allow
root login privileges
by deleting the root entry in
ftpusers, you should also modify the
security policy in
/etc/default/login to reflect the site security policy
for remote login access by
root.
Other default entries are administrative identities that are typically
assumed by system applications but never used for local or remote login,
for example
sys and
nobody. Since these entries do not have a valid
password field instantiated in
shadow(5), no login can be performed.
If a site adds similar administrative or system application identities in
passwd(5) and
shadow(5), for example,
majordomo, the site should consider
including them in the
ftpusers file for a consistent security policy.
Lines that begin with
# are treated as comment lines and are ignored.
FILES
/etc/ftpd/ftpusers A file that lists users for whom
ftp login
privileges are disallowed.
/etc/ftpusers See
/etc/ftpd/ftpusers. This file is deprecated,
although its use is still supported.
/etc/default/login /etc/passwd password file
/etc/shadow shadow password file
ATTRIBUTES
See
attributes(7) for descriptions of the following attributes:
+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | See below. |
+--------------------+-----------------+
The interface stability for
/etc/ftpd/ftpusers is Volatile. The interface
stability for
/etc/ftpusers is (Obsolete).
SEE ALSO
login(1),
ftphosts(5),
passwd(5),
shadow(5),
attributes(7),
environ(7) May 1, 2003
FTPUSERS(5)