FTP

[DataCorrupt]

I'm having trouble with vsftp. The OS is Fedora Core 3, and I got the FTP working and writable, but every user that I create has full access to everything on the server through ftp. I'm pretty sure that this is happening because of some small thing that I forgot, but I just can't think of what that could be. Could someone help me out.

Thanks
DC

 

[thedaver]

Hmmmmm..... you might require a flogging for being lazy....

;-)

http://vsftpd.beasts.org/vsftpd_conf.html

see chroot_local_user

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[DataCorrupt]

I kind of figured that. But that doesn't really help me with what I'm trying to do. I need 4 levels of access, each level having access to the levels below them. Would creating each users home directory within a different users home directory work?

My head hurts.
DC

 

[thedaver]

The setting above constrains a user within their homedir and they cannot move "higher" towards root "/".

If you set the homedirs correctly, yes would get the desired effect. Note, however that this impacts everything else the relies upon, reads from, writes to, or references the homedir and "~".

Therefore, plan carefully your proposed change...

OR consider the use of symlinks in users' regular homedir folders which SHOULD allow access to the hierarchy you are creating. I'd test that though, I forget if vsftpd is willing to allow symlink folders in a chroot environment for users.... seems like it should work if you had the rights to make the symlink....

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[RhythmAce]

I went to the link thedaver gave in his first reply. It looks like you can setup a cofiguration on a per user basis. The directive is user_config_dir. It's way down near the bottom.

 

[RhythmAce]

Sorry - I forgot to say that if you have 4 levels. You should be able to put everybody into one of four groups and have a set of privileges for each of them. I use proftpd so I'm not sure how it would be done with vsftp but they may have a way to do something like that.