FTP Service Troubleshooting | Fixing File Upload Issue | CompTIA Security+ Exam SY0-601

Fixing File Upload Issue

Prev Question Next Question

Question

An administrator has configured a new Linux server with the FTP service.

Upon verifying that the service was configured correctly, the administrator has several users test the FTP service.

Users report that they are able to connect to the FTP service and download their personal files, however, they cannot transfer new files to the server.

Which of the following will most likely fix the uploading issue for the users?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

The issue described in the scenario indicates that the users are able to connect to the FTP service and download files, but are unable to upload new files to the server. This suggests that the problem may be related to permissions or access control.

Option A suggests creating an Access Control List (ACL) to allow the FTP service write access to user directories. This may resolve the issue, as it would grant the necessary permissions for users to upload files to the server. However, it is important to ensure that the ACL is properly configured to prevent unauthorized access and maintain security.

Option B suggests setting the Boolean selinux value to allow FTP home directory uploads. SELinux is a security module used in many Linux distributions to enforce mandatory access control policies. Enabling this option may allow users to upload files to their home directories using FTP, but it also carries some security risks. It is important to carefully evaluate the impact of changing SELinux settings before making any changes.

Option C suggests reconfiguring the FTP daemon to operate without utilizing the PSAV mode. PSAV mode is a feature of some FTP servers that enforces file permissions and access control. Disabling this mode may allow users to upload files to the server, but it also reduces security and may expose the server to potential vulnerabilities.

Option D suggests configuring the FTP daemon to utilize PAM (Pluggable Authentication Modules) authentication pass through user permissions. PAM is a modular system used for authentication in many Unix-like operating systems. Configuring the FTP daemon to use PAM authentication may help resolve the issue, but it depends on the specific configuration and requirements of the server.

Overall, the most appropriate solution may depend on the specific needs and security requirements of the server. Option A is likely the safest and most secure solution, but may require additional configuration and maintenance to ensure proper access control. Option B and C carry some security risks and may not be appropriate in all situations. Option D may be a viable solution depending on the specific configuration and requirements of the server.