SuSE

Hi

I need to create a user who can have access on only one folder.
for example I created a user "test" . he should have access only on folder
/testfolder.

The problem is that the user will mostly use FileZilla to ftp his files in the testfolder.

In the fileZilla , i want him to be unable to read other folder than his own that is /testfolder. he should not be able to access any other folders under / .

Can anyone guide me

Thx

If your a root , or if you have root access . you can change the File or folder permission
using chmod .....so other users can't able to read

I dont think i have quite understood what u meant but

Must i change all right on all the other folders to stop the testuser from accessing it

is there not a way to grant the group "testuser" in which test is a user access only on the testuser folder.

A lot depends on your FTP server. I think proftpd will let you restrict a user to one particular directory. You might even be able to arrange a chroot jail.

The thing is a user need to ftp his files in a particular folder. I just dont want him to mess up with other files ..
creating chroot jail (im a bit new to suse linux) might b a prob for me. On that same server i have oracle / weblogic and all..

Thats why, i want to do it a simple way..

Like for example the group "testuser" should SEE ONLY its folder.

It seems he cannot delete files not owned by him..thats fine. But he can still create new files in directories owned by root for instance.

Any idea....

I repeat: A lot depends on your FTP server. (What is it?) I think proftpd will let you restrict a user to one particular directory, and might even be able to arrange a chroot jail.

That would be highly secure -- as far as his login would be concerned, directories above the one he's chrooted into simply wouldn't exist. If you want to restrict him to one and only one directory and not even know others exist, chroot is what you want.

But, doing that depends on your FTP server.

Being able to create files in directories owned by root is normal if the directory is world-writable or he belongs to a group which is allowed to write to it. WARNING -- if he is able to create files in a directory, he may be able to delete files owned by anyone there as well! This is because file deletion is controlled by directory write permissions, not file ownership. (There are some obscure options in some filesystems to change this behavior.) An example in my home directory:

Code:

$ sudo touch something
Password:
$ ls -l something
-rw-r--r-- 1 root root 0 Aug  9 10:34 something
$ rm something
rm: remove write-protected regular empty file `something'? y
$

Make sure he doesn't belong to any groups he doesn't need to belong to.

i have succeeded in creating a chroot jail

chroot /testccs ..it works

clientsyslogng:/ # chroot /testccs
bash-3.1# ls


Now can you please explain to me how to attach a user login to it

For example testuser when he logs in ..he should login into /test (home directory)