How to prevent FTP users from listing or accessing files outside of their home directory

Introduction

The ChrootEveryone configuration directive is responsible for preventing access outside of the home directory of an FTP user. This directive is turned on by default in cPanel, but it is possible that it could have been disabled at some point. Use the following procedure to re-enable this configuration.

Procedure

1. Log in to the server as the root user via SSH or Terminal
2. Create the local FTP template configuration file:

touch /var/cpanel/conf/pureftpd/local

3. Open the file with your favorite text editor and add the following directives in YAML format:

ChrootEveryone: 'yes'

4. Run the following command to rebuild the new FTP configuration:

/usr/local/cpanel/scripts/setupftpserver pure-ftpd --force