topic Re: "Restrict User to his Home directory during FTP" in Operating System - Linux

"Restrict User to his Home directory during FTP"

Tania Ap. Serpa Martins — Wed, 13 Apr 2005 12:12:22 GMT

People,

I have read about ftpaccess and wu-ftp, and I would like to know if there is someone that had implemented FTP for users and they are restricted to access their HOME directory during FTP process. What tool was used to implement it?

Re: "Restrict User to his Home directory during FTP"

RAC_1 — Wed, 13 Apr 2005 13:01:55 GMT

Does it help, if you set perms correctly??

eg. /home/xxx will be owned by xxx with 755 perms only. /home will be owned by root with 755

Re: "Restrict User to his Home directory during FTP"

Slawomir Gora — Wed, 13 Apr 2005 13:14:57 GMT

Hi,

I recommend you proftpd server
http://www.proftpd.org/

If you want restricted access to users home directory just uncomment (or add) below line in proftpd config file (/etc/proftpd.conf)

DefaultRoot ~

Re: "Restrict User to his Home directory during FTP"

Rick Garland — Wed, 13 Apr 2005 14:44:24 GMT

You can setup a 'chroot' for this account. The directory they can ftp to is the root directory as they see it. They can traverse down the directory structure from the $HOME (including mkdir) but they will not be able to go any higher than $HOME. Basically they are kept in a chroot jail.

Note that this setup can be accomplished for user ftp access to other directories as well.

Look up 'chroot'. There is lots of info for this.

Re: "Restrict User to his Home directory during FTP"

Stuart Browne — Wed, 13 Apr 2005 19:43:37 GMT

Rick is right on the money!

'man ftpaccess', search for 'chroot'.

In most recent distributions, this is the default environment.

If using an older distribution (older than RH8), then you may need to update the FTP server you are using, to either a newer wu-ftpd, or to something better (proftpd, or vsftpd).

If the users who are accessing this system are coming from another Linux/Unix box, it may also be wise to investigate the use of SSH/SCP/SFTP instead.

Re: "Restrict User to his Home directory during FTP"

Tania Ap. Serpa Martins — Thu, 14 Apr 2005 05:32:26 GMT

I would like thank you everybody for the response. I could make test with FTPACCESS and it have ran without problem, the way what I want. But when users in Restrict mode the commands like ls -l, dir donÂ´t run, only command ls like ftp anonymous.

Thanks a lo

Re: "Restrict User to his Home directory during FTP"

Rick Garland — Thu, 14 Apr 2005 12:15:58 GMT

When you setup a chroot jail, you create a directory structure under the specific users home that contains the various commands such as 'ls'.

This is required because the user cannot go any higher, this is the root directory to the user. All other commands (/usr/bin, /usr/sbin, etc.) are unknown because of the chroot jail.

Research the chroot. You will find that you need to copy some of the commands to the chroot jail for the specific user.

Re: "Restrict User to his Home directory during FTP"

Tania Ap. Serpa Martins — Thu, 14 Apr 2005 12:53:24 GMT

Thank you everybody, now I can restrict user in your Home directory with FTPACCESS"

Best Regards,

Tania