file permissions..specific scenario help???

[jason.rgd]

I've created a new group and a new user called dftp... Now I wanna do one thing... If 'dftp' connects thru ftp he should be directed to a particular location... and he shouldn't be able to see other folder except for his own including the parent folder that contains that location...

To achieve the first task... I changed dftp's home folder to the location I want... However while connecting thru ftp... user dftp has been given permissions to see other folders and check out the contents of the other folders.. What should I do???

[thewanderer]

You should set your FTP server so that it restricts the user to their home directory only. The instructions will vary depending on your FTP server. What in particular are you using?

[jason.rgd]

I've installed pureftp since wikipedia said it has a graphical user interface... I haven't found the GUI yet

[saulgoode]

This is controlled on the host by the configuration of the FTP daemon. The particular configuration settings are dependent upon which FTP daemon you are using but is to my knowledge always controlled by a file in the /etc directory (/etc/proftpd, /etc/ftpaccess.ctl, /etc/pure-ftpd.conf, etc).

The proftpd configuration file uses an XML-like syntax and you can control access to directories with entries such as:

Code: Select all

<Directory /home/ftp-user>
  <Limit WRITE>
    DenyAll
  </Limit>
</Directory>

One would restrict users of ftpd with /etc/ftpaccess.ctl settings such as:

Code: Select all

readonly: /home/ftp-user
readwrite: NONE

And though I've never used it, Pure-ftpd appears to offer the easiest solution: you just include a "-A" option when starting the daemon and all users are restricted to their home directories.

[jason.rgd]

thanks a ton... will have to try it to find out..

[aspnair]

You need an ftp server supporting "chroot" option. Looks like pure-ftpd can use that.

Code: Select all

apt-cache show pure-ftpd
.....

 Free, secure, production-quality and standard-conformant FTP server.
 Features include chrooted home directories,
.....