Submitted by ah...lifes...good on Sat, 03/24/2007 - 04:52
File Manager - users able to access all files on server
Usermin configuration is currently set by default to allow all Usermin users to access all files on the server (including root level files) via File Manager.
This should NOT be set as the default.
The default should be set to allow users to their own home directory and below only.
> Webmin > Usermin Configuration > Access Control Options > Root directory for file chooser > *tick* User's home directory
> Webmin > Usermin Configuration > Usermin Module Configuration > File Manager > Limit user to home directory? > *tick* Allow access to home and directories below..
Status:
Closed (fixed)