How to remove delete permission for proftp?

[ozgurerdogan]

For only one user, I need to remove delete permission. So user can only download , upload file bot must not delete any file or folders.

How can I do that?

 

[zEitEr]

Hello,

If you are using ProFTPd (and directadmin offers both ProFTPd and Pure-FTPd), you might want to use

.ftpaccess files

Just create a file in a directory where you want to limit access for user_name_here with similar content:

    <Limit CWD PWD DIRS READ>
      AllowUser user_name_here
    </Limit>

    <Limit ALL>
      DenyUser user_name_here
    </Limit>

http://www.proftpd.org/docs/howto/Limit.html
http://www.proftpd.org/docs/howto/Directory.html

 

[ozgurerdogan]

Thank you very much. One more question please:

How can I hide/protect .ftpaccess file for that limited ftp user account (limited user has only DELE RMD commands)?

 

[zEitEr]

chattr it immutable:

chattr +i .ftpaccess

 

[nobaloney]

I haven't read ProFTPd documentation in a long time; have you tried to see if the .ftpaccess file is protected from viewing/changing by FTP?

Jeff

 

[ozgurerdogan]

I haven't read ProFTPd documentation in a long time; have you tried to see if the .ftpaccess file is protected from viewing/changing by FTP?

Jeff

I tried that first but threats it as regular file.

Thanks to zEitEr. It is now immutable.

 

[zEitEr]

Thanks to Jeff, as he gave me a hint, and now I can suggest this solution:

I guess you could try to use PathDenyFilter

PathDenyFilter "\\.ftpaccess$"

Add it in /etc/proftpd.conf between

<Global>

and

</Global>

And nobody would even read its content via FTP/FTPS/SFTP. But it still will be possible to edit the file via Directadmin file manager and with PHP/Perl/Bash/etc scripts... so chattr is still the best way to protect the file from unauthorized modifications.

But in your case it might be useful to use PathDenyFilter

 

[scsi]

You could use <IfUser> from this proftpd module and put it right in proftpd.conf http://www.proftpd.org/docs/contrib/mod_ifsession.html