Chroot Limitations of PROFTPD

PROFTPD. How does conf change? I want to restrict different FTP user to read and write in his own directory, other directories are not readable and writable. Please help a bar!! Please take a look at this configuration file is wrong there: (FTP USER and FTP group has, control directory is/app/ftpdir allow directory is/app/ftpdir/pearl) # Virtual Hosting Server Configurat Ion # for Frontier Internet Services Limited # (http://www.000.com/) # ServerName ' Master Webserver ' # Spawn from inetd? # #ServerType Inetd # or maybe a standalone server ... # servertype standalone # don ' t give the server banner until _a Fter_ Authentication # deferwelcome off # Some basic Defaults # Port Umask 002 Timeoutlogin Utnotransfer 900 timeoutstalled 3600 # No, I don ' t we ' ll run as root! # User FTP Group FTP

# We want clients to is able to login with "anonymous" as "as" "FTP" useralias anonymous FTP Requirevalidshell No

# This is a non-customer usable name, (ie they should to be connecting via www.{ Domain}) # not ' hostname '. Therefore let's dump them in a dummy account and wait for them to # scream. # defaultroot/app/ftpdir/# performance, let's do DNS resolution when we process the logs ... # usereversedns off # # Wh ere do we put the PID files? # #ScoreboardPath/VAR/RUN/PROFTPD # # Logging Options # #TransferLog/var/spool/syslog/proftpd/xferlog.legacy # Some Lo gging formats # #LogFormat default '%h%l%u%t '%r '%s%b ' #LogFormat auth '%v [%P]%h%t '%r '%s ' #LogFormat write '%h% L%u%t "%r"%s%b "# Global Settings #

Displaylogin welcome.msg Displayfirstchdir Readme # has to delete before uploading is a pain;) # AllowOverwrite Yes # # Turn off Ident lookups # identlookups off # Logging # file/dir Access # EXTENDEDLOG/VAR/SPOOL/SYSLOG/PROFTPD/AC Cess.log Write,read WRITE # # record All logins # # Extendedlog/var/spool/syslog/proftpd/auth.log Auth Auth # # Paranoi A logging level ... # # #ExtendedLog/var/spool/syslog/proftpd/paranoid.log all default

# Deny writing to the base server ... #

Denyall

#--------------------------------------------# Virtual Servers start here ... # # (Note:this is normally auto generated By a # script written into house. #--------------------------------------------# # ewftp.ewserver.com. # This is the ' default server # Gets all ' connections for www. {Customer.domain}, #

ServerAdmin admin@ewserver.com ServerName "Ewmaster ftpserver" Maxloginattempts 2 Requirevalidshell No # Transferlog/var /spool/syslog/proftpd/xferlog.www maxclients defaultserver on #DefaultRoot ~!staff Defaultroot/app/ftpdir AllowOverwrite Yes

# # No quickly do we kick someone out # Timeoutlogin Timeoutidle 900

Denyall

User FTP Group FTP useralias anonymous FTP

Allowall

Denyall

# --------------------------------------------

# --------------------------------------------

# blocks them from doing anything than reading ... #

Allowall

Floatboat told ME this below,but didn ' T WORK: Modify proftpd.conf, add Defaultroot ~ GroupName where GroupName is the name of the user group, For example, add a new user username, and a new group groupname, to limit the username to its home directory only need to add the statement above to the proftpd.conf. Remember to restart PROFTPD after the change is complete