diff --git a/etc/systemd/system/vsftpd.service.d/custom.conf b/etc/systemd/system/vsftpd.service.d/custom.conf index 84170f2..0ca11d6 100644 --- a/etc/systemd/system/vsftpd.service.d/custom.conf +++ b/etc/systemd/system/vsftpd.service.d/custom.conf @@ -9,5 +9,6 @@ ProtectControlGroups=true LockPersonality=true MemoryDenyWriteExecute=true SystemCallArchitectures=native -InaccessiblePaths=/var/www/ -InaccessiblePaths=/root/ +InaccessiblePaths=-/var/www/ +InaccessiblePaths=-/root/ +ReadWritePaths=-/run/ diff --git a/etc/vsftpd.conf b/etc/vsftpd.conf index 7c56728..6a49d03 100644 --- a/etc/vsftpd.conf +++ b/etc/vsftpd.conf @@ -140,7 +140,7 @@ chroot_local_user=YES # directory should not be writable by the ftp user. This directory is used # as a secure chroot() jail at times vsftpd does not require filesystem # access. -secure_chroot_dir=/var/run/vsftpd/empty +secure_chroot_dir=/run/vsftpd/empty # # This string is the name of the PAM service vsftpd will use. pam_service_name=vsftpd