My Book Live FTP security hole

Here are the lines that I edited in the /etc/truestees.conf and the /tmp/truestess.mod.  I commented out the original lines so that I could easily undo my changes.

##[/dev/sda4]/shares:+share:RWBEX:www-data:RWBEX
[/dev/sda4]/shares:www-data:RWBEX
##[/dev/sda4]/shares/Public:*:RWBEX:*:CU
[/dev/sda4]/shares/Public:2ndNature:RWBEX:guest:RBE
[/dev/sda4]/shares/Public/Uploads:guest:RWBEX

 I had to modify the first line since my guest account is a member of the share group which has write access to the shares folder on the local network, but not through FTP.  You could probably leave this line alone of your “guest” account is not a member of the share group.

The second line was modified to allow local user 2ndNature full access to the /shares/Public directory but only allow RBE permissions for guest.  The last line gives guest full permissions to the /shares/Public/Uploads sub-directory.