Vesta 2.0 is coming soon! See our progress update: https://vestacp.com/docs/vesta-2-update
FTP can access everywhere
-
RealSmanly
- Posts: 4
- Joined: Wed Mar 04, 2015 1:13 am
FTP can access everywhere
I created a FTP account using the Additional FTP under the web tab and the plain user can access all the files on the server!
How would I lockdown the user?
I've already tried both of the FTP and SFTP found http://superuser.com/questions/370953/h ... -with-sftp and the user can still access everywhere when using SFTP.
How would I lockdown the user?
I've already tried both of the FTP and SFTP found http://superuser.com/questions/370953/h ... -with-sftp and the user can still access everywhere when using SFTP.
Re: FTP can access everywhere
It's not a bug, but sshd feature. Sad, but true.
In future releases may be will chroot for sftp, but it's not trivial matter and there is no simple method.
Temporaly fix is disabling SFTP
In file /etc/rssh.conf disable sftp
#allowsftp
then restart ssh
/etc/init.d/ssh restart
In future releases may be will chroot for sftp, but it's not trivial matter and there is no simple method.
Temporaly fix is disabling SFTP
In file /etc/rssh.conf disable sftp
#allowsftp
then restart ssh
/etc/init.d/ssh restart