/*
 * I assume that you start your proftpd with UID=70 and GID=70 .
 * Proftpd is known to work in both inetd and standalone modes.
 *
 * WARNING: Do NOT set uid/gid to ftp user/group if your proftpd
 *          has anonymous ftp access!
 */

/usr/sbin/proftpd {
	uid 70			// perhaps you need to change these
	gid 70
	groups no
	
	chroot yes
	root default

	cap set empty
	cap effective set {
		bind		// Needed to bind tcp port 20
		chroot
		// You don't need these capabilities if you have
		// anonymous FTP access only:
		setuid
		setgid
		dac		// This is needed due to the bug in kernel
				// that should be fixed in 2.2.17, I hope.
				// If it is fixed use 'dacrs' instead.
	}

	uidcap effective mask {
		bind		// Needed to bind tcp port 20
	}

	exec deny all		// proftpd doesn't need external programs
}
