2

I'm in the process of configuring an FTP server, using vsftp. I wish to have a couple different users. Some of these should only be able to read files, others should only be able to put files and some of these should also be able to create directories.

I am investigating whether it is possible to use cmds_allowed or cmds_denied on a per-user basis, so that, for example, certain users will fail to execute PUT or MKD while other users will succeed.

However it seems like these are only per-server options and, thus, not configurable on a per-user basis. Is this correct? There is no way to use them with different users?

  • Have you tried file permissions to achieve this? – RalfFriedl Jul 18 '18 at 19:09
  • @RalfFriedl I'm looking for security in depth, so I'm asking whether it is feasible to also add the "commands filters" on a per user basis in addition to whichever permission I give to the user on the file system. – Giacomo Alzetta Jul 19 '18 at 6:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.