Surely running ProFTPD as non-root will help?
Running ProFTPD as a non-root user gives only a marginal security improvement on the normal case and adds some functional problems. Such as not being able to bind to ports 20 or 21, unless it’s spawned from inetd. ProFTPD takes a middle road in terms of security. It only uses root privileges where required and drops to the UID defined in the config file at all other times. Times when root is required include, binding to ports < 1024, setting resource limits, reading configuration information and some network code. For Linux 2.2.x kernel systems there is the POSIX style mod_linuxprivs module which allows very fine grain control over privileges. This is highly recommended for security-conscious admins.
Related Questions
- Budhists seem to think there is something non-material about the mind. But surely the mind is just the brain, or maybe a program running on the brain?
- Are you asking immediately after a CrossFit workout or are you asking if CrossFit will help you with running 5k’s?
- Help, Im running the old unsupported COPY/LIST/MERGE IBM TSO commands. Are there supported versions?
