Home / server / Questions / 544850
Accepted
zigojacko
Asked: 2013-10-10 04:13:12 +0800 CST

Create new vsftpd user and lock to (specify) home / login directory

  • 772

I need to periodically give temporary and limited access to various directories on a CentOS linux server that has vsftp installed.

I've created a user using useradd [user_name] and given them a password using passwd [password].

I've created a directory in /var/ftp and then I bind this to the directory that I wish to limit access to.

What else do I need to specifically do to ensure that when this user logs into FTP, they only have access to this directory please?

linux

3 Answers

  1. Best Answer

    Complete answer that solved my question for any others that are after a step by step walkthrough...

    Install vsftpd using this as a guide.

    • Create user with useradd [user_name].
    • Create user's password with passwd [user_name]. (You'll be prompted to specify the password).
    • Create FTP directory in /var/ftp and then bind to the 'home' directory you wish to specify for this user with mount --bind /var/www/vhosts/domain.com/ /var/ftp/custom_name/.

    • Change user's home directory with usermod -d /var/ftp/custom_name/ user_name

      In /etc/vsftpd/vsftpd.conf, ensure all all of the following are set:-

      • chroot_local_user=YES
      • chroot_list_enable=YES
      • chroot_list_file=/etc/vsftpd.chroot_list

    Only list users in the vsftpd.chroot_list file if you want them to have full access to anywhere on the server. By not listing them in this file, you're saying restrict all vsftpd users to their specified home directory.

    In other words (for reference):-

    1. means that by default, ALL users get chrooted except users in the file...
      • chroot_local_user=YES
      • chroot_list_enable=YES
    2. means that by default, ONLY users in the file get chrooted...
      • chroot_local_user=NO
      • chroot_list_enable=YES
    • 61

  2. For me it didn't work even after the above. There was a local_root already set to a directory, and whatever I do, user's directory hasn't jailed. Finally it is worked after only changed

    chroot_local_user=YES

    And following procedure

    1. vi /etc/vsftpd.conf
    2. Add the line 'user_config_dir=/etc/vsftpd_user_conf' (no quotes)
    3. mkdir /etc/vsftpd_user_conf;
    4. cd /etc/vsftpd_user_conf
    5. vi user_name;
    6. Enter the line 'local_root=/srv/ftp/user_name'

    Just my two cents if anyone else had same issue.

    • 14

  3. The chrooting mentioned in previous answers didn't work on my ubuntu 18.04 server. I finally got it working using this reference: https://passingcuriosity.com/2014/openssh-restrict-to-sftp-chroot/

    • 0