Restricting FTP Users in a chroot-ed Jail:
———————————————————-
We can specify an explicit list of local users to
chroot to their home directories by specifying,
chroot_list_enable=YES
in /etc/vsftpd/vsftpd.conf
more over we need to specify the list of
users which are to be chroot-ed,
in a file specified by
chroot_list_file.
If chroot_list_file=/etc/vsftpd/chroot_users
then we need to enter the users’ names in /etc/vsftpd/chroot_users.
Restart the ftp server and login as those users.
Check whether they CD to other
directories. Theres an additional syntax in vsftpd.conf
which just reverse the default configuration just like
userlist_deny=NO does for access rights.
If, chroot_local_user=YES,
then users who are NOT listed in /etc/vsftpd/chroot_users would only be chrooted.
