I have a
vsftp server that services a read-only public space by anonymous login. It works fine. I need to add a few specific users that will authenticate by username/password and they will have different user-specific home directories that are also read-only.
I have configured virtual guest users and they can log in (authenticating via PAM). The problem that I have is that these users can only access world-readable files. I don't want to make the files world-readable – they are all owned and accessible by the
nobody user and they have no group or world permissions.
I have configured
vsftp so that it runs as
nobody and so that the guest user name is
nobody – I would have expected that this meant all guests were 'nobody' and should therefore be able to read files accessible to
The configuration that I added for virtual users is below
# Specific users local_enable=YES guest_enable=YES guest_username=nobody user_sub_token=$USER local_root=/srv/backup/$USER pam_service_name=vsftpd allow_writeable_chroot=YES
An example home directory (listed from the filesystem):
drwx------ 2 nobody nobody 4096 May 15 12:09 a_directory drwx------ 5 nobody nobody 4096 May 7 12:07 another_directory -rw------- 1 nobody nobody 95744 May 4 17:07 FILE.txt -rw------- 1 nobody nobody 104502 Apr 22 17:14 another_file
How do I configure
vsftp so that virtual users can see the files in their directories ?