Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run

ls

and is able to change to any Directory and browse freely on the server ..from the root

/

and upwards.. I added this line to etc/shells

/bin/false

in hopes that that would prevent this ... I really only want the userftp account to be able to upload to the generic

/home/FTP-Shared 

directory, and be able to do nothing else on the server. How is this accomplished ... This is a headless Ubuntu box..and I am using CLI only .. no GUI admin tools

share|improve this question

3 Answers 3

up vote 1 down vote accepted

Have you considered chrooting proftpd into /home/FTP-Shared? Then it can't access anything outside of there.

share|improve this answer
    
Thanks, that was a helpful start...posting full solution below. –  CaseyIT Mar 25 '10 at 11:27

Cry Havok is correct, you will have to set up chrooting. Also, the /bin/false will restrict the user from ssh'ing to the box. It has nothing to do with the ftp behaviour itself.

share|improve this answer
    
Good to know, thanks. –  CaseyIT Mar 25 '10 at 11:26

To achieve this, all I had to do was uncomment this line :

DefaultRoot                     ~

from this file:

/etc/proftpd/proftpd.conf

and then run

sudo /etc/init.d/proftpd restart
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.