Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I used

adduser <name>

and created a new user, andrew. Now I want to give him read/write access only to /var/www/sitename.com and its contents.

How am I supposed to do this?

I tried sudo chown andrew /var/www/sitename.com but he is still able to see all the folders and files under /var/www and other directories.

share|improve this question
add comment

1 Answer 1

up vote 3 down vote accepted

Changing the ownership to a designated user will not change the users default home directory specified in passwd file. Anyhow, You may achieve this in different ways. But to make it simpler do this by opening up a terminal;

Firstly make a back-up of your /etc/passwd file doing below;

sudo cp /etc/passwd /etc/passwd.back

Once done, edit the file (either with vi or nano), I prefer nano which is pretty easy;

sudo nano /etc/passwd

Locate the created user. A line should reflect as below assuming the user is andrew;

andrew:x:1001:1001:andrew:/home/andrew:/bin/sh

Replace /home/andrew with /var/www/sitename.com & save the file by hitting CTRL+O then enter to save & then CTRL+X to exit. This will direct the user to specified directory. Login as the user and see whether it points to **/var/www/sitename.com by also checking for any permission issues. If permission issue persists, then add the user to the www-data group by doing below;

useradd -G www-data andrew

EDIT: regarding the comment, I just had a quick search and found some more detail. Well, you may edit vsftpd.conf file located in /etc/ directory

sudo nano /etc/vsftpd.conf

un-comment (remove only the # if its there at the beginning) the following line;

chroot_local_user=YES

Note: Just to be safe, make a back-up of the configuration file before you make any changes to it.

sudo cp /etc/vsftpd.conf /etc/vsftpd.conf.back

Source: How to create a FTP user with specific /dir/ access only & vsftpd.conf on Ubuuntu

Hope it helps!

share|improve this answer
    
it works, but I still can access other folders –  Vladimir Stazhilov Jan 27 at 15:13
1  
that is because the user is also in www-data group too.. –  AzkerM Jan 27 at 16:17
1  
@VovaStajilov, I had a quick search added few more in-detail by editing. I hope it may help you. –  AzkerM Jan 27 at 16:51
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.