Config: Debian Lenny Apache2
I have configured SSH to "PermitRootLogin no" and have created another user to login with and the do "su".
Now I want to connect with e.g. Filezilla via SFTP. I can do that by creating a user that only has access to "/var/www" (all my website are located there e.g. "/var/www/domain.com")
But doesn't that kinda defeat the idea of using "su"? Of course "su" in this case will secure everything else but "/var/www" will not get the added protection. The reason I created the "su" setup in the first place was to protect my websites better.
By the way, I am the only one that will be uploading stuff to the server.
What am I missing?