FTP user has access to /var/www

Discussion in 'Installation/Configuration' started by bagocina, Apr 2, 2015.

  1. bagocina

    bagocina New Member

    Hi guys,
    i have problem with FTP users permissions. When i create FTP user in ISPconfig in setting has folder e.g. "/var/www/clients/client0/web6", but if login this user, i can click through to /var and also /etc, /boot...
    Any ideas?
    Thanks
     
  2. ressel

    ressel Member

    Do you have any shell users enabled to this website?
     
  3. bagocina

    bagocina New Member

    No, all users has /bin/false

    Code:
    web1:x:5004:5005::/var/www/clients/client0/web1:/bin/false
    web3:x:5005:5005::/var/www/clients/client0/web3:/bin/false
    web6:x:5006:5005::/var/www/clients/client0/web6:/bin/false
    web9:x:5007:5005::/var/www/clients/client0/web9:/bin/false
    web19:x:5009:5005::/var/www/clients/client0/web19:/bin/false
    web20:x:5010:5005::/var/www/clients/client0/web20:/bin/false
    
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Check the pure- ftpd config file to ensure that virtual chroot is on.
     
  5. bagocina

    bagocina New Member

    Yeah, is true like in install manual on this page.
    Code:
    # STANDALONE_OR_INETD
    # valid values are "standalone" and "inetd".
    # Any change here overrides the setting in debconf.
    STANDALONE_OR_INETD=standalone
    
    # VIRTUALCHROOT:
    # whether to use binary with virtualchroot support
    # valid values are "true" or "false"
    # Any change here overrides the setting in debconf.
    VIRTUALCHROOT=true
    
     
  6. bagocina

    bagocina New Member

    Any ideas? It's big problem, when I can click through over all FTP.
     

Share This Page