nerdexam
CompTIA

LX0-104 · Question #408

An administrator has just configured vsftp and notices that she cannot follow symbolic links when connected to the FTP server. What is the most likely reason for this?

The correct answer is B. vsftpd is running in a chroot environment. The inability to follow symbolic links in vsftpd is often caused by security configurations that restrict filesystem access, such as chrooting users.

Administrative Tasks

Question

An administrator has just configured vsftp and notices that she cannot follow symbolic links when connected to the FTP server. What is the most likely reason for this?

Options

  • AThe follow_symlinks=no option has been set in vsftpd.conf.
  • Bvsftpd is running in a chroot environment.
  • CThis installation of vsftpd was not compiled with support for symbolic links.
  • DThe user account she is connecting with is not listed in /etc/security/ftpusers.

How the community answered

(61 responses)
  • A
    3% (2)
  • B
    82% (50)
  • C
    10% (6)
  • D
    5% (3)

Why each option

The inability to follow symbolic links in vsftpd is often caused by security configurations that restrict filesystem access, such as chrooting users.

AThe follow_symlinks=no option has been set in vsftpd.conf.

While follow_symlinks=no (or allow_symlinks=NO) in vsftpd.conf would prevent following symbolic links, it's typically set to 'yes' by default, and a chroot environment (B) is a more common default security measure that inherently restricts external symlinks.

Bvsftpd is running in a chroot environment.Correct

If vsftpd is running in a chroot environment, symbolic links that point to files or directories outside of the user's jailed directory will not be resolvable or followable, due to the restricted filesystem view and security isolation.

CThis installation of vsftpd was not compiled with support for symbolic links.

vsftpd is almost always compiled with support for symbolic links, as it's a fundamental filesystem feature, making lack of compilation support highly unlikely.

DThe user account she is connecting with is not listed in /etc/security/ftpusers.

If the user account were listed in /etc/security/ftpusers, the user would be completely denied FTP access, not just prevented from following symbolic links.

Concept tested: vsftpd chroot and symbolic link behavior

Source: https://man7.org/linux/man-pages/man5/vsftpd.conf.5.html

Topics

#vsftpd#FTP#symbolic links#chroot

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice