VSFTP and SSH
I searched for this general topic on the forum but found nothing relevant, so here 'tis...
Related to Redhat 7.3, OpenSSH_3.1p1 and vs-FTP 2.6
I have setup my vs-FTP server to "jail" specific users to their home directory when they login, but for some reason when utilizing a SSH connection (SFTP on port 22), all of these settings seem to be overridden and fall back to the default vs-FTP behavior.
I realize the SFTP connection is more secure, but in SFTP mode a user can literally browse the entire system and download different files at will.
If I change the connection back to standard FTP on port 21 the user is confined again...
In addition to this problem, an SFTP connection does not perform any logging to the vsftpd.log while normal FTP connections do.
Is there a setting for vs-FTP using port 22 to deal with these issues or is it something related to SSH where vs-FTP is no longer the FTP server in control? Or should I not worry with it?
I feel compelled to use SSH connections whenever possible.
Thanks for any clues.
|