If the access is secured; users are chrooted in their home directory, and other security basics, how difficult is it for users to access other data on the server?
- Dedicated server
- Linux CentOS
- ftp server software : Pureftpd
- TLS enabled
- FTP users are virtual users with no access to OS shell
- Each users are in the same group 'ftpgroup'
Each user is the owner of his own directory :
chown –R <ftpuser_login>.ftpgroup /ftp/<user_directory>
In directory /ftp/ there are all ftp users directories.
But outsite /ftp directory, there are also for instance one directory /directory_with_sensitive_data