control the ftp directory

[hangyu]

I want to create a new login ID and control this ID can only access to a specify directory eg. /home/ftp_usr , can advise what can I do ? thx

[Vitaly Karasik_1]

so you want to set up chroot-ed ftp user.
there are lot manuals, see for example http://www.cyberciti.biz/tips/vsftp-chroot-users-limit-to-only-their-home-directory.html

[hangyu]

thx reply,

But I found that if I add "chroot_local_user=YES" , ALL user only can access OWN directory , if I want a SPECIFY user can access some SPECIFY directory , what can I do ? thx

"Now all users of VSFTPD/FTP will be limited to accessing only files in their own home directory. They will not able to see /, /etc, /root and /tmp and all other directories. This is an essential security feature. "

[Alexander Chuzhoy]

You can add a user with:
useradd -d /path/dirname
to the system so upon his login he'll get the directory (and its subdirectories) you want. If you enabled chroot_local_user option then the user will be limited to this directory.

[Ivan Ferreira]

You need to use the following options:

chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/vsftpd.chroot_list

Only users listed in the file will be in chroot jail.

[George Liu_4 · Accepted solution]

In addition to the above tips, no shell for the user.

[hangyu]

thx reply,

if I want to limite the user in the specify directory not OWN directory , what can I do ? thx.

[Alexander Chuzhoy]

hm,
you can always change ownership with:
chown username.groupname foldername

Make sure that the user or everyone has r-x permission for this directory, otherwise he won't be ableo to cd there.

[hangyu]

thx alexander ,

"you can always change ownership with:
chown username.groupname foldername

Make sure that the user or everyone has r-x permission for this directory, otherwise he won't be ableo to cd there" .

of course the user can access the foldername , but if I want the user can ONLY access the foldername but not other directoies , what can i do ? thx

[Alexander Chuzhoy]

from my previous reply:

You can add a user with:
useradd -d /path/dirname
to the system so upon his login he'll get the directory (and its subdirectories) you want. If you add "chroot_local_user=YES" option to /etc/vsftpd/vsftpd.conf and restart the vsftpd service,then the user will be limited to his own directory. His own directory doesn't have to reside in /home, thus it can be the directory (the only directory with its subdirectories) that you want him to access.

P.S.
You didn't assign points, which will probably result in less replies to your questions in the future.

[hangyu]

thx alexander,

if I not only want to release the user home directory , I want to release one more directory eg. /tmp so that the user can access his own directory and /tmp either , what can I do ?thx