Su to ftp user?

[vegas]

Is it possible to su or sudo to my root from a ftp user?
eg
su kamira@mynoughtydomain.com

 

[handsonhosting]

Why would you want to do that?

The less access through "root" the better. Even when accessing a server via Shell, ROOT should be locked down so that a user must shell in with a username, then SU to root. But on an FTP level, why would you want to do something like that?

 

[vegas]

nope just finding out the harm a ftp user can do,or the things he/she can find out about my server with a simple ftp account thank you men

but I already know you cant su with a ftp account only with a user account

 

[handsonhosting]

Yeah, not really possible with FTP, and not possible with sFTP either. That's not to say that they can't gain root access if your system is not secure. They could potentilaly use FTP to access the /etc/passwd files, download that, then they can extract and use toot passwords to access the machine later - or enable shell access to then allow an SU command.

 

[vegas]

Ye maybe well you are saying accesin etc dir since passwords are not stored in passwd but in shadow but still you got some point there,so what type of hardening do you think would help so they wouldnt gain access thru ftp?
thank you,hows about ur smoking how many cigars do you smoke daily? would bet 20 ,and thirty on weekends just like a freaking teenager jojoj

 

[vegas]

anybody can tell me how to protect my server from a ftp installation made by an assigned ftp user into x dir?

 

[handsonhosting]

Need to clarify the question a little better. What is it that you're looking to do?

 

[GridVirt]

Kernel hardening is one way to lock your OS down and make sure users are completely isolated. Have a look here if your interested on Kernel hardening with grsecurity >> http://blog.gridvirt.com/advanced-centos-security-6-2/

 

[gmotech003]

Hello,

To sudo ftp then hit return. You will then be prompted for the superuser password. Type it in, hit return, and you're FTPing as the superuser (as long as your FTP daemon is configured to accept the superuser as a remote login; sometimes they're default configured not to for security reasons).

Hope this helps.


MOD NOTE: Signatures must be setup in your profile and not manually added to posts.

 

[ReadyMakers]

Try not to use root user unless necessary or be ready for hackers

 

[HostLeet]

Kernel hardening is one way to lock your OS down and make sure users are completely isolated. Have a look here if your interested on Kernel hardening with grsecurity >> http://blog.gridvirt.com/advanced-centos-security-6-2/

Link doesn't work?

 

[linux7802]

Is it possible to su or sudo to my root from a ftp user?
eg
su kamira@mynoughtydomain.com

You are inviting the hackers to hack your server, why you want su option for FTP user.....

 

[m2hdiana]

yes, it is possible but not the secure way to login to root user.

 

[CanSpace]

You can su to root from any user generally speaking - but NOT from within an FTP session.

 

[postcyhosting]

Deal with O.S

Hello friend,

this issues include in Dealing with O.S.
Harden you kernel of O.S and make sure to stipulate separate internet accessibility with user friendly functions.

Thank you