Ftp – vsftpd default permissions for website directory and ftp

ftppermissionsunixvsftpd

I'm trying to setup vsftpd and my users correctly. I can connect to the ftp with my user but I can't create any directory or file. My websites folder will be there: /srv/www/domain

vsftpd.conf

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
chroot_local_user=YES

Directory permissions

drwxrwxr-x  4 root www-data 4096 Oct  5 20:58 www

drwxrwxr-x 2 user_ftp www-data 4096 Oct  5 22:19 domain

User group

user_ftp => www-data

It's strange because when the domain folder have:

755 permission: I can't connect to my FTP account (500 OOPS: vsftpd: refusing to run with writable root inside chroot()) but I can add files & folders (if i change the permission when i'm logged)
575 permission: I can connect, but can't edit/delete/add files & folders

What I'm doing wrong :)?

Best Answer

My solution.

with chroot_local_user set to YES, the root should be the owner of the home directory, after that you can create other directory and assign permission to the FTP USER so he can do everything he want.

Root user access/permission to /srv/www/domain

FTP user access/permission to /srv/www/domain/public_html

Related Solutions

VSFTPD – local_root=/var/www/sites/$USER Not Interpreted

What you need to use is a combo of user_config_dir and local_root. In the main config file /etc/vsftpd/vsftp.conf you have an entry like:

chroot_local_user=YES
user_config_dir=/etc/vsftpd/users

Inside that directory (/etc/vsftpd/users) you have a config file with the same name as the user ($USER in your case), and inside that file you have:

local_root=/var/www/sites/USER
dirlist_enable=YES
download_enable=YES
write_enable=YES

...where USER is the actual name (not literally USER or $USER).

Centos – FTP not showing files or directories

Per the comments, disabling SELinux seems to have solved the problem. I would suggest to now:

Turn it back on with setenforce 1.
Use ls -Z /path/to/ftp/home/folder to check the context of the directory you're trying to FTP into, and see if the context is "public_content_t"
If not, use restorecon(8) to fix incorrect context, e.g. restorecon -R /path/to/ftp/home/folder

Best Answer

Related Solutions

VSFTPD – local_root=/var/www/sites/$USER Not Interpreted

Centos – FTP not showing files or directories

Related Topic