I’m stumbling over the file
/etc/ftpusers. So, there was some idea of a concept to allow only specific users ftp access in the past … but with the current
/etc/vsftpd.conf all users can have ftp access and transfer their passwords in clear text via network by that.
By OSMC-default restrict ftp access only to user
osmc and disallow all others.
/etc/vsftpd.conf and create a new file
/etc/vsftpd/user_list with content
# /etc/vsftpd/user_list: list of users allowed FTP access. See also /etc/vsftpd.conf
For future updates after Debian Sketch introduction don’t touch /etc/vsftpd/user_list, so a customized allowed ftp user list will survive.