I strongly recommend setting up a jail for the anonymous ftp area, similar to what we did for cvs. I've extended the jailsh frob we use for mirroring via rsync a bit so that you can specify the root on the command line (and improved the syslogging a little bit). The new program is called jailcmd. This involves copying the necessary binaries and shared libs into a subdirectory of /ftp-root and modifying the ftpd entry in /etc/inetd.conf to launch ftpd using jailcmd. Note that you need to create two nested roots: one for ftpd, and one for the anonymous ftp area itself.
I'm working with Tim Spencer <firstname.lastname@example.org> to get this set up.
There is an IS help desk call opened for this as well: call #175725.
Done. wu-ftpd 2.6.0 running on komodo (and also on tegu & gila). The /pub root is in /ftp-root/anonymous .