SSH Support

[kilburn]

Really interesting idea. The problems you raise may be solved by using the "admins" (panel users) table instead of "ftp_users"

Despite that, patching SSH is (IMHO) a no-go for our project. We don't have the manpower to support such a strong commitment. Anyways:

Quote:It's not possible to change the ownership and umask because we do need access for www-data.

From what I understand in the code, the required things are:
1. The homedir and all its parent directories must be owned by root.
2. The homedir and all its parent directories must not be writable by group nor everyone.

So I would try assigning the following permissions:

Code:

/var/www/virtual   root:root   rwx rx rx
/var/www/virtual/domain.tld    vuXXXX:root rwx rx rx

Obviously, individual files inside "domain.tld" should then be protected carefully. This is, never allow reading to anyone, so choose:

Code:

vuXXXX:vuXXXX for user and/or php only files.
vuXXXX:www-data for the "htdocs" folder.
root:vuXXXX for user-readable but non-writable files (like the "backups" folder)

Tell us how it goes if you try it please! Thx!