Hi,

We are using Redhat linux 4.0 enterprise edition and we have configured VSFTPD for ftp. I have created 10 user accounts to 10clients. Now I have query about making folders invisible.

one my of myclient using third party ftp tool for accessing his account after logging in he clicked on back then he was able to see entire other client folders but not accessable. As a confidentiality norm we can not make visible other clients folders. Please help me out inthis regard how to make other clinets folders to logged client.

Please Please.

Regards

Srinivas

Make sure in the vsftpd.conf file that these lines are uncommented -
Then set each user so that their home directory is the same directory that they can ftp into.

They can hit back, cd /, or any other string of commands, it won't let them see beyond their individual "area".

Peace,
JimBass

For each ftp user set it up as chroot to their specific directory. This means that whenever they login they will see their specific directory as if it were "/" even if it is really something like /home/ftpuser1. Because it is / they can never go up a directory (e.g. to /home).

This is something you would want to do for ANY ftp directory anyway since ftp itself is not very secure at all. We have several in house ftp directories used for transferring specific files. Even though they are internal we set them up as chroot.

For the chroot directory you'd have to add an etc and bin and possibly other subdirectories because that user won't have access to the existing /etc, /bin et al for the same reason as they won't have access to the full /home.

There are tutorials on setting this up. Do a Google search for ftp chroot.

By the way some people don't even allow commands like ls to work. If you know the file is there you can get it by typing in the name because you knew what it was. This also applies to subdirectories of the chroot directory. The user can cd to the subdirectory but has to know it is there. I've never gone quite that far so I'm not sure how it gets configured but I've been on plenty of ftp sites that do so I know it can be done.

Thanks Jim. It's working.

Regards

Srinivas

Glad it worked out for you. Enjoy!

Peace,
JimBass