SFTP Security

[imagize]

Why is that when a user logs in via SFTP that they can traverse out of their home directory and go into important directories like /usr and /var? These are normal user accounts not root and they don't even have shell access.

How do you disable SFTP or contain users to their own home directories when using SFTP?

Thanks

[cPanelDavidG]

Why is that when a user logs in via SFTP that they can traverse out of their home directory and go into important directories like /usr and /var? These are normal user accounts not root and they don't even have shell access.

How do you disable SFTP or contain users to their own home directories when using SFTP?

Thanks

Users can only browse these directories, they cannot perform modifications to any file they do not have access to. The ability to traverse outside of ~ is an artifact of using a *nix file system.

[chirpy]

Indeed. It's also a fact of life of shared web hosting. For example, any perl script can also view the same files. It's why correct directory and file permissions settings are critical in a shared environment.