ProFTPD module mod

ProFTPD module `mod_facl`

The mod_facl module adds support to ProFTPD for POSIX ACLs. For more information on what POSIX ACLs are and how they work, see "POSIX ACLs on Linux":

    http://www.suse.de/~agruen/acl/linux-acls/online/

POSIX ACLs are supported and implemented differently on Linux, BSD, and Solaris. ProFTPD attempts to work properly with POSIX ACLs on all of these platforms.

Installation instructions for mod_facl can be found here. Note that the configure script will automatically determine whether the system supports POSIX ACLs, but it will not automatically make use of that support unless the --enable-facl option is used. In addition, to have ProFTPD fully honor POSIX ACLs on files, you will also need this mod_facl module.

The most current version of mod_facl can be found in the ProFTPD source distribution:

  http://www.proftpd.org/

Directives

FACLEngine

FACLEngine

Syntax: FACLEngine on|off
Default: on
Context: server config
Module: mod_facl
Compatibility: 1.3.1rc1 and later

The FACLEngine directive enables or disables the module's runtime checking of POSIX ACLs. Use this directive to disable the module.

Installation

To use the mod_facl module, configure proftpd using the following:

  $ ./configure --enable-facl --with-modules=mod_facl ...

Logging
The mod_facl module supports trace logging, via the module-specific log channels:

facl

Thus for trace logging, to aid in debugging, you would use the following in your proftpd.conf:

  TraceLog /path/to/ftpd/trace.log
  Trace facl:20

This trace logging can generate large files; it is intended for debugging use only, and should be removed from any production configuration.