Author Topic: how to prevent a user to save his own .ftpaccess-file in a directory  (Read 189 times)

Offline wohu

  • New user
  • *
  • Posts: 1
    • View Profile
Hi,

how can I prevent an user of a ftp-account to save his own .ftpaccess-file in a subdirectory and to overwrite my base-ftpaccess-directives?

In the root-directory I saved this .ftpaccess:

HideFiles (\.ftpaccess)$
<Limit ALL>
IgnoreHidden on
DenyAll
</Limit>

<Limit DIRS LOGIN READ WRITE>
AllowUser xxx_yyyyy
</Limit>

The permissions of this file are "only read for all" (linux)

Thx for your help
wohu

Offline Flo

  • Supporter
  • ***
  • Posts: 109
    • View Profile
Re: how to prevent a user to save his own .ftpaccess-file in a directory
« Reply #1 on: March 19, 2017, 08:17:34 pm »
  <Directory /path/to/dir>
    <Limit STOR>
      DenyFilter \.ftpaccess$
    </Limit>
  </Directory>