NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
FTP 'Home Folder' Directory access for all?
I've recently factory reset a RN316 on OS 6.5.1 and I've enabled FTP access on OS 6.5.1 using this with Authentication Mode as 'user', however it does not set location of the FTP user home folder cor...
You can apply those changes at your own risk with no support from NETGEAR; or you could feature request it and get full support from NETGEAR. Your choice.
not to sound like a nub, but do securty concerns also go in the idea section? I can put it there, but its based on votes or something?
The feature request would be to add the option for SFTP Chroots, to make the device more secure; since it doesn't exist, it's a new feature request. Voting just gives the issue more visibility and a proper time schedule, but we see all items in the idea exchange regardless of ranking. Once you put it in the idea exchange, I can approach the appropriate teams to work on such a feature. (It would not only require backend mods, but UI and middleware modifications).
Your security concern only became a concern when you chose to enable SSH. Disabling SSH would be your workaround to your security concern. You allowing SSH Access to your NAS is essentially what you're doing with SFTP; we gave an option to restrict SSH access for non-admin users with the rsync only option (for rsync over SSH access).
ok thanks
I've posted it here: https://community.netgear.com/t5/Idea-Exchange-for-ReadyNAS/Security-Issue-Restrict-SFTP-users-to-home-folder/idi-p/1133411#M537
...but I think you put it more succinctly as I'm not an expert *nix user...
Thanks. I will follow up with the team on that feature request. I personally enjoy SFTP Chroots on my web servers, and would be awesome to have on ReadyNAS as well.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
