I am setting up my Ubuntu 14.04 server.
I want to have an FTP access (I use
vsftpd), mainly for my apache2 server, so I added a new user to the
www-data group. I also set up the settings for
vsftpd.conf, only allowing local users, and
I changed the home directory of my new user to
/var/www/home. The permission are 755 (
I can now create files, download them in the
/var/www/home/ directory and can not change to the root directory
/ on purpose for security reasons.
But which strategy can I now use, when I want to change some conf files, download log files and so on, when I only allow the users to stay in their home directory?
Which other security methods are highly recommend, to make my ftp server secure?