0

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run

ls

and is able to change to any Directory and browse freely on the server ..from the root

/

and upwards.. I added this line to etc/shells

/bin/false

in hopes that that would prevent this ... I really only want the userftp account to be able to upload to the generic

/home/FTP-Shared

directory, and be able to do nothing else on the server. How is this accomplished ... This is a headless Ubuntu box..and I am using CLI only .. no GUI admin tools

Castaglia
  • 3,349
  • 3
  • 21
  • 42
CaseyIT
  • 427
  • 3
  • 8
  • 14

3 Answers3

1

Have you considered chrooting proftpd into /home/FTP-Shared? Then it can't access anything outside of there.

Cry Havok
  • 1,845
  • 13
  • 10
1

Cry Havok is correct, you will have to set up chrooting. Also, the /bin/false will restrict the user from ssh'ing to the box. It has nothing to do with the ftp behaviour itself.

Iraklis
  • 488
  • 1
  • 6
  • 14
1

To achieve this, all I had to do was uncomment this line : 

DefaultRoot                     ~

from this file:

/etc/proftpd/proftpd.conf

and then run 

sudo /etc/init.d/proftpd restart
CaseyIT
  • 427
  • 3
  • 8
  • 14