Hi, i'm running SUSE 9.1. Basically my htdocs folder for apache is located in srv/www/htdocs

The owner of this folder is a user called "webupload" it belongs to the group "www".

When i ssh to the server using the webupload account (it's also used to access the htdocs directory via pureftp) you can actually access folders above srv/www/htdocs for example, by typing /etc/ you can get directly to the directory without question!!?!?!

Is there anyway of stopping this the only person i want to be able to do this is root.

Thanks.

change the ownership of the respective directory using the chmod command
man chmod
for details

Sorry i don't understand?

Eventhing about /srv/www/ is owned by root so as far as i was aware webupload shouldn't be able to get above these directorys. It's fine in pureftp not when you ssh on though.

edit: in it's present state webupload can view some config files etc.

this will revoke Read, Write, or Exe priviledges from everyone but root. Only root will be able to read/modify this file now. Understand this may have adverse effects on your webserver, and I really don't know what, as I don't run a web server. This is up to your discretion.