Bug 151337

Summary: RFE: pure-ftpwho and non-root accounts
Product: [Fedora] Fedora Reporter: Jose Pedro Oliveira <jose.p.oliveira.oss>
Component: pure-ftpdAssignee: Aurelien Bompard <gauret>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 3   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-03-24 08:52:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
RFE: pure-ftpwho and non-root accounts none

Description Jose Pedro Oliveira 2005-03-17 01:48:01 UTC 
Aurelien,

This is a RFE (Request For Enhancement) regarding pure-ftpd:
I would like to be able to run pure-ftpwho without being root.

The patch - pure-ftpd-1.0.20-rfe.patch - modifies/creates the following files:
1) Modifies - pure-ftpd.spec (usermode/pure-ftpwho + pedantic)
2) Adds - /etc/pam.d/pure-ftpwho
3) Adds - /etc/security/console.apps/pure-ftpwho
4) Modifies /etc/rc.d/init.d/pure-ftpd (pedantic)

The usermode files are based on the ones included in the package hddtemp (also
in extras).

Target branches: FC-3 and devel

TIA,
jpo
Comment 1 Jose Pedro Oliveira 2005-03-17 01:52:21 UTC 
Created attachment 112067 [details]
RFE: pure-ftpwho and non-root accounts
Comment 2 Aurelien Bompard 2005-03-23 22:24:20 UTC 
Looks sane, and works fine. Committed.
Concerning potential security problems, here's something from the official FAQ :
=========
http://www.pureftpd.org/FAQ
---
-> How do I give access to the 'pure-ftpwho' command to non-root users?
The 'pure-ftpwho' command is restricted to root by default, because users
probably shouldn't be given the ability to spy what other users are doing on
the same host. However, it's safe to put the setuid bit on that command, in
order to have it work as any user:
    chmod 4711 /usr/local/sbin/pure-ftpwho
----
Using usermode is just better. (only local users are allowed).

Thanks Jose.