Restricting a user to their home directory in vsftpd

elsheepo · 11-22-2016, 01:01 PM

So I have vsftpd installed.

Code:

root@D620:~# ls /var/log/packages/*vsftp*
/var/log/packages/vsftpd-3.0.3-i586-3

/etc/vsftpd.conf

https://jpst.it/PGeK

/etc/vsftpd.user_list

Code:

ftbeatzz

/etc/vsftpd.chroot_list

Code:

ftbeatzz

I use ufw for my internal firewall, all standard ftp ports are open.

iptables -L

https://jpst.it/PGfS

I have a user, 'ftbeatzz' whom I want reserved specifically for ftp access.

entry for 'ftbeatzz' in /etc/passwd

Code:

ftbeatzz:x:1003:100:,,,:/home/ftp/:/bin/bash

The Goal: I want the user 'ftbeatzz' to be restricted to it's $HOME directory.

Currently when I login to the ftp service, it lets 'ftbeatzz' loose in the / directory, able to read/write to all files.

custangro · 11-22-2016, 01:34 PM

You need to set it up with

Code:

  chroot_local_user=YES

elsheepo · 11-22-2016, 01:55 PM

I added the option to the end of /etc/vsftpd.conf, I also commented out the lines

Code:

#chroot_local_user=NO
#chroot_list_enable=NO
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list

and I'm getting the same error. See attachment. Also, here is the current vsftpd.conf

/etc/vsftpd.conf

https://jpst.it/PGoj