FTP Permissions Question

MyNameIsTom · 06-18-2007, 12:41 AM

Nice to meet you.
I'm new to Linux.

I'm running a server off of Fedora 7.
I'm FTPing with vsftpd.

I have the directory /var/www/sub.

I have the user1 who's home directory is /var/www/sub/user1.
I have the user2 who's home directory is /var/www/sub/user2.

Right now, no matter who I login as for FTP (except anonymous) I can access all folders on the server.
I only want user1 to be able to access /var/www/sub/user1 and user2 to only access /var/ww/sub/user2. I don't want them to have permissions to access any of the parent directories or any other folder on the server for that matter.

How can I do this?

dugas · 06-18-2007, 07:48 PM

ftp chroot

vglass · 06-19-2007, 10:03 AM

you have to configure your users so they are "jailed" in their own directory. that way they can only see what's in their directory and nobody else's. jscape secure ftp server for linux does this automatically. you can download free community edition at:

http://www.jscape.com/secureftpserver/

Wim Sturkenboom · 06-20-2007, 04:25 AM

Code:

#WimS; additional config
#jail user to their homedirectory
chroot_local_user=YES

#only allow me
userlist_enable=YES
userlist_deny=NO
userlist_file=/etc/vsftpd.user_list

The first directive (above) in the file vsftpd.conf enables the 'jail'. Unfortunately I don't know how to 'tranfer' it to the web directories (/var/www/sub) for the users. My approach is therefor slightly different: each user has his normal home directory and I tell Apache to look there for the files.

Code:

/home
  |
  +-- user1
  |    |
  |    +-- web (document root)
  |    |
  |    +-- inc
  +-- user2
  |    |
  |    +-- web (document root)
  |    |
  |    +-- inc

I use the following for my virtual host (as an example); apache 1.3!

Code:

<VirtualHost 172.31.212.193:443>

#  General setup for the virtual host
DocumentRoot "/home/commandcentre/web"
ServerName btd-commandcentre
ServerAdmin your.email@here