>>Можно ли запретить пользователю ftp, переход выше его home-папки?
Какая система? Но всё равно отвечу что можно.
Но всё равно читать маны - ключевые слова ftpchroot
5. If the user name appears in the file /etc/ftpchroot, or the user is a member of a group with a group entry in this file, i.e. one prefixed with `@', the session's root will be changed to the directory specified in this file or to the user's login directory by chroot(2) as for an ``anonymous'' or ``ftp'' account (see next item). See ftpchroot(5) for a detailed description of the format of this file. This facility may also be triggered by enabling the boolean "ftp-chroot" capa- bility in login.conf(5). However, the user must still supply a password. This feature is intended as a compromise between a fully anonymous account and a fully privileged account. The account should also be set up as for an anonymous account.