I'm running Ubuntu 12.04 as a webserver with multiple websites. I want to grant users FTPS access to certain directories in order to administer the website. I have the directories for multiple sites set up as normal -
I've installed vsftpd using this guide :
but instead of setting up the user as specified in the guide I added user1 to the www-data group. I've chroot'ed that users home directory to the individual sites directory.
So here's my question, I know the next step would be to chmod the directory and it's contents to allow rwx for the www-data group but I'm not sure if that is the proper way of doing it from a security point of view. What are the implications of setting things that way and is there a better way of doing it?