Restricting Users to Home Directories

jlimited

Well-Known Member
Jun 4, 2004
69
0
156
I am attempting to restricting users to Home Directories, but I the usually place where I would do that is not there.

Where does Cpanel create all of the virtual hosts at?

Should it be under:

httpd.conf
proftpd.conf

Thanks
Travis
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
33
473
Go on, have a guess
One handy script is:

/scripts/enablefileprotect

Which offers some, if marginal, restriction. Of course non of this (including jailshell) has any effect on CGI perl and php scripts which can still view anything that is appropriately readable anywhere on the server.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
33
473
Go on, have a guess
True. But you, presumably, won't be getting rid of perl CGI. What these restrictions are for is to stop vulnerable scripts (php) from allowing hackers access to things you don't want them to have. None of these will stop a user with an account from accessing everything that the file/dir permissions allow. Don't get a false sense of security.