I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root:
My website is under as usually
/opt/lampp/htdocs/SiteName. I want my employees to only access the dir
/FTPUSERS and not others, by any means of using via console-SSH/ GUI-FTPClients. Is the
chrooting right way to block them for not navigating to other dirs? Or is there any other way for blocking them? Please let me know.
One more small doubt has arisen regarding file and folder permissions regarding the
LAMPP. At present the user and group under /opt/lampp/htdocs/ are all
root and root. In this link php.net its mentioned that directories must run under
nobody and nobody. Is this the right way of permission setting ?
My OS is Debian Lenny 3. The daemon running at present is the
openssh-sftpserver. We've blocked the port-21 for ftp access. But sftp is running still under port-22. Employee can login via
sftp and ssh on Terminal. We want to block the Console mode operating for particular users, only webmaster and root accounts must have all the access. We also want to block users from navigating outside of the
/FTPUSERS dir using any GUI FTP Clients such as WinSCP.