VSFTPD – How to fix this security issue?

Question

I've created a user called example using adduser command and setted its password and everything. That was part of the VSFTPD setup process.

However, I've noticed that I can also access using the port 22 both in my VPS' SSH console and SFTP / FTP. How can I make it so that it is only FTP accessible ?

I'm gonna share my server with a client to let him create a static HTML site using only and no more than FTP.

Thanks for your answers.

score 2 · Answer 1 · answered Sep 23 '17 at 10:38

2

If you want to disable ssh access for a particular user you could set its SSH shell to /bin/false.

answered Sep 23 '17 at 10:38

Warrior

121
2

and probably `chroot` them into a jail. The openssh server can do this with its internal sftp subsystsem. – ivanivan Sep 23 '17 at 15:30

user9517 · Answer 2 · 2017-09-22T21:48:54.010

0

You can disable sftp in your /etc/ssh/sshd_config file. Some would argue that using FTP is more of a security issue that sftp.

edited Sep 22 '17 at 21:48

answered Sep 22 '17 at 21:34

user9517

115,471
20
215
297

I don't want to disable the SFTP service completely, I use SFTP for my root user, but I would like to disable the SFTP and SSH services for my `example` user. – Kevin Andrews Sep 22 '17 at 23:11
2

VSFTPD virtual users are probably your way forward. – user9517 Sep 23 '17 at 08:08

VSFTPD – How to fix this security issue?

2 Answers2