Link to home
Create AccountLog in
Linux Security

Linux Security

--

Questions

--

Followers

Top Experts

Avatar of wiedmanb
wiedmanb

VSFTP Keep ftp users from leaving there home directory
Right now I have a vsftp server runnig on a SUSE 9 enterprise machine.  I made a user that is assigned to a group that has no permissions.  Right now when that user logs in via ftp they are placed inside of there home directory.  Which is fine, but  when the do the following

> cd ..

They are able to leave that directory and see the directories above them in the tree structure.  Though they are unable to write to them I still see this as  a bit of a problem.

How can I restrict them to there home directories but still allow them to create folders and write files in side of that jome directory.

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

ASKER CERTIFIED SOLUTION
Avatar of marxymarxy

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account
Avatar of decoleurdecoleur

A good resource for setting up vsftpd:
http://www.engardelinux.org/howto/vsftp_howto.html

I would add that If you want to enable users to have access to any files or binaries while in a chrooted environment they have to be duplicated in the chroot jail.

Also of note, both vi and the ftp client can enable a user shell access that will bypass most chroot environments.

Hope this helps.
Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

Linux Security

Linux Security

--

Questions

--

Followers

Top Experts

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.