Hello forum,
I configured a vsftpd server on RHEL 6.2 trying to avoid my /nologin/ FTP Users could remove and create directories.

The last week we've a security issue, when an FTP without /home directory (/sbin/nologin shell) remove a (luckily) backup'ed directory and their files.

I found interesting cmds_allowed directive for vsftpd.conf file, but I need some users could create/remove files and directories and some others don't.


There is some way to define which user could execute some FTP Commands and other user, other different commands too?

I don't know, maybe, configurig a file for each user and define the cmds_allowe directory for each one.




Thank you very much for your help.

Sincerely
Eduardo Mejia V.

Firstly why don't you chroot, your user's to a controlled environment? http://www.cyberciti.biz/tips/vsftp-...directory.html

if you want to use the cmnds_allowed directive an example is listed here:

http://blog.vigilcode.com/2011/08/co...p-with-vsftpd/

Hello dear gdizzle,
Well, We have an environment,based on chroot, but 3 users needs to use the same directory.
Then we want, 2 of this 3 users could use some commands like PUT/GET but they don't be able to REMOVE and CREATE folders.

Well, the solution of chroot migth work but, the users need to go out of their directory.

It is possible to define special commands for different users?



Thank you for your advice, and your time to send me a reply.


Best Regards.

Sincerly
Eduardo Mejia.