about vsftpd
 

1) can we configure local users not able to read other folders
(etc,var...)when they r logging to ftp
2)if they want to log other folders(if they have proper rights) only given by correct path only

can vsftpd in RHEL5 configure like this

that would be more of a local permissions issue than an vsftp issue
when you configure a user in linux, they should be able to ftp into their own home directory unless you explicitly deny them access in vsftpd
my reccomendation would be to create groups and assign users to those groups, then change group ownerships of those directories to the appropriate group so that when they log in using ftp, their group membership gives them the appropriate permissions to those directories

the commands to do this are
useradd *user* (there i believe is an option to create the home directory at this point but i've never used it)
mkdir /home/*user* (unless you specified the create home option as above then skip this step)
chown *user* /home/user (unless you created the home directory using useradd then skip this step)
passwd *user* (set password for user
groupadd *group* (create a group)
chgrp *group* *durectory* to assign a group ownership to a directory(folder)
chmod (man chmod for specifics) to change permissions of a file/directory

then you should be set ;)

ok i know
by changing their home directories it is possible to locate in to a single directory.(that not a problem)
but when they connected their is a option give by ftp client software go to one up level

generally etc,var...umask value is 755. so they can read those directories.

my question is they do not able to go one more up level. The local users are not read remaining folders( also have read permissions)

is it possible ?

Going up one level does not necessarily lead to the root directory. If you have your ftp directories within some parent directory that doesn't allow entering (executable bit unset), then the user will not be able to walk upwards in the directory tree.

There are certainly some configuration options to do this some other way, but that will really depend on the FTP server that is used. And it is certainly possible to do, because there are a lot of ftp sites that do not allow stepping out of the home directory.

----------
T74marcell

Arch Linux

ok

by putting in to in subdirectries we can avoid to go to the root directory .


thank you for u r reply. this is very help to me.