I have been batling with vsftpd for days now. I started with trying to setup seceure vsftpd on my current Centos 5.6 server but could not lock users down to their home directories. I spent days trying all the suggestions I could find with chroot_local_user etc...with no luck. I then read a post that said that some of the directives were not implemented on Centos 5. I then downloaded Centos 7 and setup a new ftp server with vsftpd and tried all the suggestions again. Still no luck.
What then struck me is that even though I have userlist_enable=YES and have the standard ftpusers and user_list files with user root in I can still connect with user root to the ftp server. Nothing i change in vsftpd.conf seems to affect vsftpd.
Does anybody know what i am missing? I will appreciate any help.
my current config file:
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
chroot_local_user=YES
allow_writeable_chroot=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
ssl_enable=YES
allow_anon_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES
rsa_cert_file=/etc/vsftpd/vsftpd.pem