secure ftp

mrobb · 09-15-2004, 10:04 AM

Hello,
I have RH9 and vsftpd installed. How do you only allow the user to view the default directory. ex /var/ftp. Once I ftp in it goes to /var/ftp, but I can veiw var and /, I want to lock them to the specified directory. How do you do this?

Thanks,

MIke

Ulisses · 09-15-2004, 10:11 AM

From http://vsftpd.beasts.org/vsftpd_conf.html

Quote:

chroot_list_enable
If activated, you may provide a list of local users who are placed in a chroot() jail in their home directory upon login. The meaning is slightly different if chroot_local_user is set to YES. In this case, the list becomes a list of users which are NOT to be placed in a chroot() jail. By default, the file containing this list is /etc/vsftpd.chroot_list, but you may override this with the chroot_list_file setting.

Default: NO

chroot_local_user
If set to YES, local users will be (by default) placed in a chroot() jail in their home directory after login. Warning: This option has security implications, especially if the users have upload permission, or shell access. Only enable if you know what you are doing. Note that these security implications are not vsftpd specific. They apply to all FTP daemons which offer to put local users in chroot() jails.

Default: NO

mrobb · 09-15-2004, 12:07 PM

Thanks
That did the trick.

Mike