Announcement

Collapse
No announcement yet.

FTP Users can go above their user name into the Home Directory

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • FTP Users can go above their user name into the Home Directory

    I had to redo the server and install everything over. I installed all accounts and when a user is ftp in they can go above their account name into directories above it
    /
    ...
    bin
    dev
    etc
    home
    lib
    lib64
    opt
    proc
    sbin
    tmp
    usr
    var
    /home
    ---useraccountname
    ------.cagefs
    .cl.selector
    .cphorde
    .htpasswds
    access-logs
    etc
    logs
    mail
    public_ftp
    public_html
    ssl
    tmp
    www

    How do I stop them from getting above second Home so all they can see is is
    /home/useraccountname

    thanks
    Mitch

  • #2
    Hello Mitch,

    By default, FTP users can indeed list the root directory. They wont have permissions to see other users or upload something there, but the directory listing would be available.
    This mostly depends on the FTP service that you use and its configuration, whether it allows listing files outside of the users home folder. For example, heres how you could achieve that with the vsftpd service:
    https://superuser.com/a/370955

    Note that our CageFS component keeps users inside their own virtualized "cage". Thus, it wont make any harm to the system if the user can list the files from the virtualized root directory.

    If you have any additional questions about the way CageFS works, you may contact our Support team directly on http://(https://superuser.com/a/3709...desk.com/agent/, were glad to help!](https://cloudlinux.zendesk.com/agent)

    Comment

    Working...
    X