Need to restrict FTP access to the users home directory and below. 1

[coutoj]

Hello All,

I setup an FTP server on Linux 7.2 and i am using WU-FTP. I need to be able to restrict access for the FTP users as follows.

/home/FTP/user1/ (which have download and upload directories)

I don't want anyone to get out of their directory.

Also i am not able to use the ls command when in ftp.

Thanks,
Jason

 

[ifincham]

Hi,

You need to set up a chroot (change root) jail for guest accounts. Essentially this means that, for them, '/home/ftp/' or suchlike (i.e. somewhere lower down the real tree) appears as '/' and if they do the equivalent of 'cd ..' from there it does nothing.

The only problem is its a bit long-winded to set up. The following is a redhat doc which explains how you do it. Its a bit out of date but still applies.

http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap29sec294.html

Hope this helps