Ticket #4113 (closed defect: wontfix)
FTP can't restrict to personal directories.
| Reported by: | jjmontes@… | Owned by: | jamor@… |
|---|---|---|---|
| Milestone: | 3.0 | Component: | ftp |
| Severity: | normal | Keywords: | ftp, personal, directory, chroot |
| Cc: |
Description
See: http://forum.zentyal.org/index.php/topic,10154.0
It's not possible to activate ftp access for local users and restrict them to their personal directories at the same time, unless user directory is read only, wich normally is useless.
Vsftpd error is: 500 OOPS: vsftpd: refusing to run with writable root inside chroot()
Adding "local_root=/home" to vsftpd.conf, solves partially this issue, but chroots to /home instead private user home, and zentyal overrites it.
For local users, a better approach is to define option "passwd_chroot_enable=yes" in vsftpd.conf and set user directory to "/home/./user" (instead "/home/user) in /etc/passwd, but I don't know how to apply it to zentyal users.
Attachments
Change History
comment:2 Changed 14 months ago by jamor@…
This is due to a change in vsftpd itself.
The local_root solution needs to change the permissions and we cannot change the permissions of directories on the server just for this. Ditto for the solution of '/home/./user , this is a fudge that maybe it is admissible in a persona server but not in a distribution.
comment:3 Changed 13 months ago by jamor@…
- Status changed from accepted to closed
- Resolution set to wontfix
Hello,
I have disabled the chroot option in [77463a3]
We dont have resources now for backporting or switching to another server software so unless they allow it again in vsftpd we have lsot this feature.
Regards,
Javier