what permissions to set so ftp users can't get to rest of system
I have a server that normally usually was only used by me. This was great, as I only had to worry about myself.
A friend needed some webspace, so I setup vsftp, and gave them a login, which leads right to thier web folder.
My problem is that they can go and get out of this directory and see everything. Put files into places other than that directory.
How do I or what permissions do I need to protect my system from this user?
Should I be looking into a chroot type of solution? Is it just a matter of changing / setting permissions on the server?
Thanks for any advice.