Topic "I can see too much"

Author Message
padrazo

Guest


i just installed WinSCP for the first time and want to use it rather than ftp to upload stuff from my desktop to my webServer.

Using Win2003 for my Desktop WorkStation
Using Debian Sarge w Apache2 for my Server

Main Problem: when i log into the server I can browse the entire file system
Secondary Problem: I can write to files in
/home/padrazo
but i can not write to files in
/var/www/kingdom/
Tertiary Problem:
I can not log into the server over the internet
i.e. login to zen.padrazo.com fails but logging into my local network IP works just fine.

I know, I need help beyond the scope of your forum, nevertheless any help is appreciated.
Advertisements
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24512
Location: Prague, Czechia
With SFTP you generally have the same permissions as if you were logged in terminal. So if you want to limit your permissions, limit permissions of your account. You may use some chroot tool. but I have never does this before, so I cannot give you advice. You may search the forum, there were some hints from other users posted here.
_________________
Martin Prikryl
driver816

Guest


I have found that WinSCP requires view access to several directories:

\bin, \etc, \lib, \usr

I am able to secure the user data by removing permission for "Other", but WinSCP will not allow logons without all of these trees viewable.

I'm sure the entire tree is not needed. Is there a list of requisite files on the server?
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24512
Location: Prague, Czechia
driver816 wrote:
I'm sure the entire tree is not needed. Is there a list of requisite files on the server?

There is list of required commands. So WinSCP must have access to directories where these commands are located. This is platform-specific, so I cannot give you a list. However this is valid only for SCP. With SFTP WinSCP needs access to SFTP server only. Of course as long as the server itself does not need access to other paths. But it is again platform specific.
_________________
Martin Prikryl
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License