File and directory permissions for FTP server multiple users (howto)
Hi, I inherited a Fedora 10 FTP server, initially there was only one FTP user account with one password but things have changed and a request has been made to setup different FTP user accounts and limit access for each user to one directory.
I took the simple approach and assigned each "drwx" permissions and it basically works but in testing I notice two things:
1 - Each user can change directories up one level and see the other directory names. The good news is you get a 550 error unable to change directory to any but your own.
2 - More perplexing to me is each of the users can change to the root "/" directory and can change to some of the directories and even "get" some of the files.
Probably something fundamental I've overlooked or just not aware of. I'm not a Unix/Linux sysadmin I'm only asked to play one on occasions and I have a number of systems in my lab mostly Ubuntu 9.10.
Maybe there's a better way to setup an FTP server I'm not aware of. Thanks for any pointer.
Regards,
jw
|