Not allowing ftp login user to see above a certain directory

im using vsFTPD on centOS with webmin control panel.

i figured out how to make an account and only allow them to modify files in their "home directory" the problem is in the FTP they can view the other directories above their home directory. ie user2 s home directory is /var/www/html/user2 but if they wanted to they could go into /var/www/html and see everything there as well as download the files.

this is a serioues breach in secruity obviously becasue they can freely view any file in the server which could be holding all sorts of information their not supposed to see.

i can't figure out how to change this i think it might have to do with what "shell" they are using (theres a drop down to pick different shells) but changing it either seemed to do nothing different or it didn't let them login at all

You need to "chroot" them, but I have no idea how you would go about that with your software on your OS in your control panel

i found out where to enable chroot, but now they cant modify anything only view stuff (but they arent alloud to see above their home directory which is good)