Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web server (running Apache on Solaris 10) that I look after for some friends and I was wondering how to restrict each users FTP/SSH access. I want each account when they login to be taken straight to their home directory, and not be allowed above it. I have tried changing the permission on the folder above the users home directories to not allow the 'other' group, but this resulted in commands like cd and ls not working. I have read about the chroot command, but from what I have read it scares me. Any help or guidenance is gratefully received. Thank you in advance.

share|improve this question
up vote 0 down vote accepted

chroot is the standard way to lock ftp user accounts into a completely controlled environment. It is not scary at all - basically what you do is create a 'mini' envrionment where the user can see only certain directories, with a custom /usr directory. The special /usr has only a few files in it.

There are a series of "control" files in /etc/ftpd: ftpaccess ftpconversions ftpgroups ftphosts ftpservers ftpusers

Have a look at each file, plus there is a man page for them, ie man -s 4 ftpuser

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.