Local User Options - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Chapter 23. FTP
• secure_email_list_enable — When enabled, only a specified list of email passwords for
anonymous logins are accepted. This is a convenient way to offer limited security to public content
without the need for virtual users.
Anonymous logins are prevented unless the password provided is listed in /etc/
vsftpd.email_passwords. The file format is one password per line, with no trailing white
spaces.
The default value is NO.

23.5.4. Local User Options

The following lists directives which characterize the way local users access the server. To use these
options, the local_enable directive must be set to YES.
• chmod_enable — When enabled, the FTP command SITE CHMOD is allowed for local users. This
command allows the users to change the permissions on files.
The default value is YES.
• chroot_list_enable — When enabled, the local users listed in the file specified in the
chroot_list_file directive are placed in a chroot jail upon log in.
If enabled in conjunction with the chroot_local_user directive, the local users listed in the file
specified in the chroot_list_file directive are not placed in a chroot jail upon log in.
The default value is NO.
• chroot_list_file — Specifies the file containing a list of local users referenced when the
chroot_list_enable directive is set to YES.
The default value is /etc/vsftpd.chroot_list.
• chroot_local_user — When enabled, local users are change-rooted to their home directories
after logging in.
The default value is NO.
Warning
Enabling chroot_local_user opens up a number of security issues, especially for
users with upload privileges. For this reason, it is not recommended.
• guest_enable — When enabled, all non-anonymous users are logged in as the user guest,
which is the local user specified in the guest_username directive.
The default value is NO.
• guest_username — Specifies the username the guest user is mapped to.
The default value is ftp.
• local_root — Specifies the directory vsftpd changes to after a local user logs in.
370