Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run


and is able to change to any Directory and browse freely on the server ..from the root


and upwards.. I added this line to etc/shells


in hopes that that would prevent this ... I really only want the userftp account to be able to upload to the generic


directory, and be able to do nothing else on the server. How is this accomplished ... This is a headless Ubuntu box..and I am using CLI only .. no GUI admin tools

share|improve this question
up vote 1 down vote accepted

Have you considered chrooting proftpd into /home/FTP-Shared? Then it can't access anything outside of there.

share|improve this answer
Thanks, that was a helpful start...posting full solution below. – CaseyIT Mar 25 '10 at 11:27

Cry Havok is correct, you will have to set up chrooting. Also, the /bin/false will restrict the user from ssh'ing to the box. It has nothing to do with the ftp behaviour itself.

share|improve this answer
Good to know, thanks. – CaseyIT Mar 25 '10 at 11:26

To achieve this, all I had to do was uncomment this line :

DefaultRoot                     ~

from this file:


and then run

sudo /etc/init.d/proftpd restart
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.