Disable "ls" command for a user when he FTPs

jonty_11 · 04-05-2011, 02:44 PM

if I create a User in linux with useradd command
E.g.

useradd -s /bin/bash -d /home/testuser testuser

How can I make it such that he cannot run "ls" command when he FTPs into the server using the username/passwd I setup.

I would not mind disabling "ls" for SSh or FTP as long as user is unable to list all files in the home directory and is only able to use FTP commands like GET, PUT, RENAME etc...
Dont want them to have DELETE permission also...in this folder. This user will only be used for FTP...how can I enforce the above controls..

Using vsftpd in Linux CentOS...

tinyTux · 04-05-2011, 03:30 PM

Quote:

Originally Posted by jonty_11

if I create a User in linux with useradd command
E.g.

useradd -s /bin/bash -d /home/testuser testuser

How can I make it such that he cannot run "ls" command when he FTPs into the server using the username/passwd I setup.

I would not mind disabling "ls" for SSh or FTP as long as user is unable to list all files in the home directory and is only able to use FTP commands like GET, PUT, RENAME etc...
Dont want them to have DELETE permission also...in this folder. This user will only be used for FTP...how can I enforce the above controls..

Using vsftpd in Linux CentOS...

http://vsftpd.beasts.org/vsftpd_conf.html

According to the man page, VSFTPD(5), you set the following in your vsftpd.conf file to deny directory listing: (hint, hint... read the MANUAL page next time)

Code:

dirlist_enable
    If set to NO, all directory list commands will give permission denied.

    Default: YES

I'll let you read the rest of the MANUAL page to figure out the rest of your issues.

jonty_11 · 04-05-2011, 04:17 PM

Thx for the help...

I am looking at the manual for another option..

following permissions wanted for one user group - GET, PUT, RENAME, APPEND, DELETE)

But another Group - I only want to allow GET, PUT, RENAME, APPEND

MAN doesnt give much info...
man vsftpd
VSFTPD(8) BSD System Managerâ€™s Manual VSFTPD(8)

NAME
vsftpd - Very Secure FTP Daemon

SYNOPSIS
vsftpd [configuration file]

DESCRIPTION
vsftpd is the Very Secure File Transfer Protocol Daemon. The server can be launched via a â€œsuper-serverâ€ such as
inetd(8) or xinetd(8). Alternatively, vsftpd can be launched in standalone mode, in which case vsftpd itself will
listen on the network. This latter mode is easier to use, and recommended. It is activated by setting listen=YES in
/etc/vsftpd/vsftpd.conf. Direct execution of the vsftpd binary will then launch the FTP service ready for immedi-
ate client connections.

OPTIONS
An optional [configuration file] may be given on the command line. This configuration file has to be owned by root.
The default configuration file is /etc/vsftpd/vsftpd.conf.

SEE ALSO
vsftpd.conf(5)

jonty_11 · 04-06-2011, 10:11 AM

Found this - Can we retrict commands allowed on a per FTP user basis?
==================================================
vsftpd.conf has the following:
cmds_allowed
This options specifies a comma separated list of allowed FTP commands (post login.
USER, PASS and QUIT and others are always allowed pre-login). Other commands are
rejected. This is a powerful method of really locking down an FTP server. Example:
cmds_allowed=PASV,RETR,QUIT
------------------