Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web server (running Apache on Solaris 10) that I look after for some friends and I was wondering how to restrict each users FTP/SSH access. I want each account when they login to be taken straight to their home directory, and not be allowed above it. I have tried changing the permission on the folder above the users home directories to not allow the 'other' group, but this resulted in commands like cd and ls not working. I have read about the chroot command, but from what I have read it scares me. Any help or guidenance is gratefully received. Thank you in advance.

share|improve this question
up vote 0 down vote accepted

chroot is the standard way to lock ftp user accounts into a completely controlled environment. It is not scary at all - basically what you do is create a 'mini' envrionment where the user can see only certain directories, with a custom /usr directory. The special /usr has only a few files in it.

There are a series of "control" files in /etc/ftpd: ftpaccess ftpconversions ftpgroups ftphosts ftpservers ftpusers

Have a look at each file, plus there is a man page for them, ie man -s 4 ftpuser

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .