700 permission does not block other users reading the file

[enjoywithme]

Hi, I set a shared folder permission to 700 by chmod and the owner to root:root. 

But other users still can read the folder via ssh/ftp.

It seems the permission only work with samba share?

[Squid]

 

Realistically, though for FTP access you're probably best off using something like ProFTPd

[enjoywithme]

19 hours ago, Squid said:

 

Realistically, though for FTP access you're probably best off using something like ProFTPd

Thanks for your reply. As suggested I switch the default FTP daemon to ProFTPd. The permission of shared folder always  puzzle me. It changed itself and I have no clue.

[IMTheNachoMan]

FWIW, I am working on an enhancement to the built in vsftpd to limit a user to just a specific folder. There is no need to use ProFTPD when vsftpd can do what we need.

 

I'm almost done then hopefully they will accept my pull request. Stuck trying to figure out how the Done/Reset function works.

 

[itimpi]

1 hour ago, IMTheNachoMan said:

Stuck trying to figure out how the Done/Reset function works.

This is normally done by having 2 different buttons and using JavaScript to show/hide the one that is not relevant.

[IMTheNachoMan]

5 hours ago, itimpi said:

This is normally done by having 2 different buttons and using JavaScript to show/hide the one that is not relevant.

 

Yeah. The Unraid UI uses one button and changes the text. I can do it myself but I'm trying to find the code it uses so I can just use the same code. Trying to use as much existing code as possible. 

[Squid]

It's all automatic, if you follow the same "format" / coding structure as any other page and use forms.  ie: 

: <input type="submit" name="#apply" value="_(Apply)_" id='Apply'><input type="button" id="DONE" value="_(Done)_" onclick="done()">

 

Deviating means that you have to handle it via js

[IMTheNachoMan]

1 hour ago, Squid said:

It's all automatic, if you follow the same "format" / coding structure as any other page and use forms.  ie: 

: <input type="submit" name="#apply" value="_(Apply)_" id='Apply'><input type="button" id="DONE" value="_(Done)_" onclick="done()">

 

Deviating means that you have to handle it via js

 

Ha. I was doing that but I had a typo which is why it didn't work. Works now. Thanks!

[IMTheNachoMan]

I have the update the code (I think). I've tested it a bit but could use a 2nd set of eyes. Anyone willing to give it a test before I submit a pull request?

• Users are restricted to a folder of your choosing
• You can enable/disable logging to syslog
• You can select the root folder for each user