[NTLUG:Discuss] only the user see its directory on ftp

[Kelledin]

> How do I set up 'only the user see its directory' while they doing ftp?
> In order for apache to work (apache is pointing to /home/user/www), all the
> directories must to set read permission.
> in this case, when a user use a _powerful_ ftp client, login as the user,
> and then he can change directory up to parent directory, all other user
> directories/files will be able to see.
> Is there anyway to set the user only able to see it own directory/child
> directory and not allow to change to its parent directory (/home)?
> I am using RedHat 6.2, 2,2,14 kernel. with iptable firewall running.

Most FTP servers allow an admin to chroot specific users to specific 
directories, which sounds like exactly what you want.  I'm not sure how you'd 
do this under wu-ftpd (which is RedHat's default FTP server), but I know how 
to set it up under proftpd (http://www.proftpd.org/).  I'd advise you to use 
proftpd anyways instead of wu-ftpd, but this is really personal preference.  
I just happen to consider proftpd to be rather more secure.

Another piece of advice is to use plain FTP only as an anonymous FTP server.  
If you want non-anonymous users to be able to log in, you should strongly 
consider an sftp server (from OpenSSH).

----------
Kelledin
"If a server crashes in a server farm and no one hears it, does it still cost 
four figures to fix?"