Françoise is a Linux administrator. He notices that a user is continually abusing the FTP
service on the Linux servers by down loading extremely large files. Françoise has added
his username to the host.deny file but user is still able to use FTP. Why does the user still
have access?
A.
The user name should also be added to host.allow file
B.
The host.deny file does not allow you to exclude the FTP service.
C.
The username should be added to both the host.deny and host.allow file
D.
The username is in the host.allow file which takes precedence over the host.deny file
Explanation:
Two files are checked for inetd security, first the host.allow file and
then the host.deny file. Since a match is found first in the host.allow, the user is
allowed access. In order to be effective the user must be removed from the
host.allow file to end the conflict.
Incorrect Answers:A: This should not be done, and most likely this has occurred. By adding the user to thehost.allow
file, if the user is not already there, will guarantee that the user gets in. Theuser needs to be
removed from the host.allow file so that the host.deny can block theuser.
B: The host.deny file will block the FTP service, and almost any service that executesunder the
inetd service.
C: This is the same as answer A, the user should not be in the host.allow file because thisfile is
taking precedence and allowing the user to get in.