Hello Mitch,
By default, FTP users can indeed list the root directory. They won't have permissions to see other users or upload something there, but the directory listing would be available.
This mostly depends on the FTP service that you use and its configuration, whether it allows listing files outside of the user's home folder. For example, here's how you could achieve that with the vsftpd service:
https://superuser.com/a/370955
Note that our
CageFS component keeps users inside their own virtualized "cage". Thus, it won't make any harm to the system if the user can list the files from the virtualized root directory.
If you have any additional questions about the way CageFS works, you may contact our Support team directly on
https://cloudlinux.zendesk.com/agent/, we're glad to help!
