Vesta Control Panel - Forum

I created a FTP account using the Additional FTP under the web tab and the plain user can access all the files on the server!

How would I lockdown the user?
I've already tried both of the FTP and SFTP found http://superuser.com/questions/370953/h ... -with-sftp and the user can still access everywhere when using SFTP.

It's not a bug, but sshd feature. Sad, but true.
In future releases may be will chroot for sftp, but it's not trivial matter and there is no simple method.

Temporaly fix is disabling SFTP
In file /etc/rssh.conf disable sftp
#allowsftp

then restart ssh
/etc/init.d/ssh restart