topic Re: control the ftp directory in Operating System - Linux

control the ftp directory

hangyu — Wed, 13 Sep 2006 20:51:26 GMT

I want to create a new login ID and control this ID can only access to a specify directory eg. /home/ftp_usr , can advise what can I do ? thx

Re: control the ftp directory

Vitaly Karasik_1 — Thu, 14 Sep 2006 01:36:56 GMT

so you want to set up chroot-ed ftp user.
there are lot manuals, see for example http://www.cyberciti.biz/tips/vsftp-chroot-users-limit-to-only-their-home-directory.html

Re: control the ftp directory

hangyu — Thu, 14 Sep 2006 01:44:12 GMT

thx reply,

But I found that if I add "chroot_local_user=YES" , ALL user only can access OWN directory , if I want a SPECIFY user can access some SPECIFY directory , what can I do ? thx

"Now all users of VSFTPD/FTP will be limited to accessing only files in their own home directory. They will not able to see /, /etc, /root and /tmp and all other directories. This is an essential security feature. "

Re: control the ftp directory

Alexander Chuzhoy — Thu, 14 Sep 2006 02:03:29 GMT

You can add a user with:
useradd -d /path/dirname
to the system so upon his login he'll get the directory (and its subdirectories) you want. If you enabled chroot_local_user option then the user will be limited to this directory.

Re: control the ftp directory

Ivan Ferreira — Thu, 14 Sep 2006 08:31:31 GMT

You need to use the following options:

chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/vsftpd.chroot_list

Only users listed in the file will be in chroot jail.

Re: control the ftp directory

George Liu_4 — Thu, 14 Sep 2006 12:41:44 GMT

In addition to the above tips, no shell for the user.

Re: control the ftp directory

hangyu — Tue, 26 Sep 2006 06:23:36 GMT

thx reply,

if I want to limite the user in the specify directory not OWN directory , what can I do ? thx.

Re: control the ftp directory

Alexander Chuzhoy — Tue, 26 Sep 2006 06:31:33 GMT

hm,
you can always change ownership with:
chown username.groupname foldername

Make sure that the user or everyone has r-x permission for this directory, otherwise he won't be ableo to cd there.

Re: control the ftp directory

hangyu — Wed, 27 Sep 2006 00:28:47 GMT

thx alexander ,

"you can always change ownership with:
chown username.groupname foldername

Make sure that the user or everyone has r-x permission for this directory, otherwise he won't be ableo to cd there" .

of course the user can access the foldername , but if I want the user can ONLY access the foldername but not other directoies , what can i do ? thx

Re: control the ftp directory

Alexander Chuzhoy — Wed, 27 Sep 2006 00:53:01 GMT

from my previous reply:

You can add a user with:
useradd -d /path/dirname
to the system so upon his login he'll get the directory (and its subdirectories) you want. If you add "chroot_local_user=YES" option to /etc/vsftpd/vsftpd.conf and restart the vsftpd service,then the user will be limited to his own directory. His own directory doesn't have to reside in /home, thus it can be the directory (the only directory with its subdirectories) that you want him to access.

P.S.
You didn't assign points, which will probably result in less replies to your questions in the future.

Re: control the ftp directory

hangyu — Wed, 27 Sep 2006 01:08:30 GMT

thx alexander,

if I not only want to release the user home directory , I want to release one more directory eg. /tmp so that the user can access his own directory and /tmp either , what can I do ?thx