FPT Folder Rights

[deejay33]

RedHat 6.1
Apache 1.3

I setup a user account so that we can put files in a password protected folder. The idea is the users would put in the url ftp://username@ftp.site.com. It then would ask for the password when it takes them to their home directory. I tested this and it works great.

The problem is if I use an FTP client, I am about to move up the directory tree and see everything including all of the system files. Our customer should only be using IE to download things but I am afraid of that one "rouge" user who uses an ftp client and thinks it would be fun to start deleting things. Is there a way to limit that persons access to their one home foler?

Thanks,

 

[IRudebwoy]

What FTP server are you using?

In any case you should be able to be able to restrict the user to read-execute or read-only at the file system level to mitigate accidental damage outside their home folder.

 

[deejay33]

I am an extreem newbie when it comes to Linux. I had to read online just to find out how to add a user.

The box is an FTP server that has been running long befor I got here. Anyone who knew anything about Linux and the box is long gone. I basically use it to FTP files up to folders for customers to download.

Can you explain to me how I would restrict a user to read-only. I used Linconf to create the user.

Thanks,
Daniel Joaquin

 

[zeland]

I would guess that with RH6x, you would be using wu-ftpd. I did a quick search for chroot with wu-ftpd and found this article that I speed read through. Don't know if it will be of use to you.


--== Anything can go wrong. It's just a matter of how far wrong it will go till people think its right. ==--