vsftpd\u662f\u4e00\u6b3e\u5728Linux\u53d1\u884c\u7248\u4e2d\u6700\u53d7\u63a8\u5d07\u7684FTP\u670d\u52a1\u5668\u7a0b\u5e8f\u3002\u7279\u70b9\u662f\u5c0f\u5de7\u8f7b\u5feb\uff0c\u5b89\u5168\u6613\u7528\uff0c\u4e0b\u9762\u76f4\u63a5\u4e0a\u5e72\u8d27\u3002<\/p>\n
\u4e00\u3001\u5b89\u88c5vsftp<\/strong><\/p>\n \u4ee5\u7ba1\u7406\u5458\u7684\u8eab\u4efd\u4f7f\u7528yum\u547d\u4ee4\u5b89\u88c5vsftp\uff1a<\/p>\n [root@localhost ~]#yum install vsftpd<\/p>\n \u6839\u636e\u7cfb\u7edfyum\u7684\u4e0d\u540c\uff0c\u53ef\u80fd\u65e0\u6cd5\u627e\u5230\u8f6f\u4ef6\u5305\u6e90\uff0c\u53ef\u4ee5\u6309\u7167\u8fd9\u91cc<\/a>\u7684\u65b9\u6cd5\u89e3\u51b3<\/p>\n \u4e8c\u3001\u8bbe\u7f6evsftp\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/strong><\/p>\n 1\u3001\u67e5\u770b\u5f00\u673a\u81ea\u52a8\u542f\u52a8\u670d\u52a1\u9879\u76ee<\/p>\n [root@localhost ~]#\u00a0chkconfig –list<\/p>\n 2\u3001\u8bbe\u7f6evsftpd\u670d\u52a1\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/p>\n [root@localhost ~]#\u00a0chkconfig –level 35 vsftpd on<\/p>\n \u4e09\u3001\u914d\u7f6e\u73af\u5883<\/strong><\/p>\n 1\u3001\u6dfb\u52a0vsftp\u8d26\u53f7\uff0c\u6307\u5b9a\u8d26\u53f7\u6743\u9650<\/strong><\/strong><\/p>\n \u25a0 \u6dfb\u52a0ftp\u8d26\u53f7www\uff0c\u6307\u5b9a\/home\/www\u4e3awww\u7684\u5bbf\u4e3b\u76ee\u5f55\uff0c\u8be5\u8d26\u6237\u53f7\u9ed8\u8ba4\u4e0d\u80fd\u767b\u9646\u7cfb\u7edf\u3002<\/p>\n [root@localhost ~]# useradd -s \/bin\/nologin -d \/home\/www www \u00a0#nologin\u7684\u4f4d\u7f6e\u901a\u5e38\u5728\/usr\/sbin\/nologin\u6216\/sbin\/nologin\u4f4d\u7f6e\uff0c\u5982\u679c\u6307\u5b9a\u9519\u8bef\u5219\u65e0\u6cd5\u767b\u9646\u3002<\/span><\/p>\n \u25a0\u00a0\u4fee\u6539\u8d26\u53f7\u5bc6\u7801\u3002<\/p>\n [root@localhost ~]# passwd www<\/p>\n \u25a0\u00a0\u4fee\u6539\u6307\u5b9a\u76ee\u5f55\u6743\u9650\u3002<\/p>\n [root@localhost ~]# chown -R www \/home\/www \u00a0#-R\u53c2\u6570\uff1a\u9012\u5f52\u8bbe\u7f6e\/home\/www\u76ee\u5f55\u53ca\u671f\u5b50\u76ee\u5f55\u7684\u6240<\/span>\u6709\u8005\u4e3a\u7528\u6237www\u3002<\/p>\n 2\u3001\u914d\u7f6evsftp<\/strong><\/p>\n \u7f16\u8f91vsftp\u7684\u914d\u7f6e\u6587\u4ef6\/etc\/vsftpd\/vsftpd.conf\uff0c\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u76f8\u5173\u914d\u7f6e\u9879\uff0c\u5982\u4e0b\uff1a<\/p>\n anonymous_enable=NO\u00a0\u00a0#\u4e0d\u5141\u8bb8\u533f\u540d\u767b\u9646<\/span><\/p>\n ascii_upload_enable=YES #\u4e0a\u4f20\u65f6\u5141\u8bb8ASCII\u6a21\u5f0f<\/span><\/p>\n ascii_download_enable=YES\u00a0#\u4e0b\u8f7d\u65f6\u5141\u8bb8ASCII\u6a21\u5f0f<\/span><\/p>\n local_enable=YES \u00a0#\u5141\u8bb8\u672c\u5730\u7528\u6237\u767b\u5f55ftp\u670d\u52a1\u5668\uff0c\u9ed8\u8ba4\u662f\u5141\u8bb8\uff0c\u4e0d\u5305\u542bid\u4e3a500\u4ee5\u4e0b\u7528\u6237\u9646<\/span><\/p>\n write_enable=YES \u00a0#\u5141\u8bb8\u7528\u6237\u5177\u6709\u5728ftp\u670d\u52a1\u5668\u6587\u4ef6\u4e2d\u5177\u6709\u5199\u7684\u6743\u9650<\/span><\/p>\n chroot_local_user=YES\u00a0\u00a0##\u662f\u5426\u5c06\u6240\u6709\u7528\u6237\u9501\u5b9a\u5728\u4e3b\u76ee\u5f55\uff0cYES\u4e3a\u542f\u7528 NO\u7981\u7528<\/span><\/p>\n chroot_list_enable=YES \u00a0#\u662f\u5426\u542f\u52a8\u9501\u5b9a\u7528\u6237\u7684\u540d\u5355\uff0cYES\u4e3a\u542f\u7528 NO\u7981\u7528<\/span><\/p>\n chroot_list_file=\/etc\/vsftpd\/chroot_list\u00a0 #\u5f53chroot_list_enable=YES\u65f6\uff0c\u8be5\u9879\u6709\u6548\uff0c\u7981\u7528\u7684\u5217\u8868\u540d\u5355\u683c\u5f0f\u4e3a\u4e00\u884c\u4e00\u4e2a\u7528\u6237\uff0c \u5982\u679c\u540d\u5355\u91cc\u9762\u6709\u4e00\u4e2atest01\u7684\u7528\u6237, \u5219test01\u7528\u6237\u4e0d\u4f1a\u9501\u5b9a\u5728\u4e3b\u76ee\u5f55\uff0c\u7528\u6237\u5c06\u53ef\u4ee5\u81ea\u7531\u5207\u6362\u76ee\u5f55\u3002<\/span><\/p>\n \u4e3e\u4f8b:<\/em><\/p>\n \u60c5\u51b5\u4e00\uff1a<\/em><\/p>\n \u73b0\u5728\u6709 test1 test2 test3 \u8fd9\u4e09\u4e2aftp\u7684\u7528\u6237\uff0c\u60f3\u8ba91\u8ddf2\u7528\u6237\u9501\u5b9a\u4e3b\u76ee\u5f55\u4e0d\u5141\u8bb8\u5207\u6362\u5230\u5176\u4ed6\u76ee\u5f55\uff0c \u4f46\u662f\u5141\u8bb83\u7528\u6237\u81ea\u7531\u5207\u6362\u90a3\u4e48\/etc\/vsftpd\/chroot_list\u5217\u8868\u540d\u5355\u5982\u4e0b:<\/em><\/p>\n test3<\/em><\/p>\n \u4e5f\u5c31\u8bf4chroot_local_user=YES\uff0c\u5e76\u4e14chroot_list_enable=YES\u7684\u65f6\u5019\uff0c\/etc\/vsftpd\/chroot_list\u540d\u5355\u91cc\u9762\u6dfb\u52a0\u7684\u662f\u6392\u9664\u9501\u5b9a\u4e3b\u76ee\u5f55\u7684\u7528\u6237\u540d\u5355\u3002<\/em><\/p>\n \u60c5\u51b5\u4e8c\uff1a<\/em><\/p>\n \u5982\u679cchroot_local_user=NO\u5e76\u4e14chroot_list_enable=YES\u7684\u65f6\u5019\uff0c\u90a3\u4e48\/etc\/vsftpd\/chroot_list\u5217\u8868\u540d\u5355\u5982\u4e0b:<\/em><\/p>\n test1<\/em><\/p>\n test2<\/em><\/p>\n \u60c5\u51b5\u4e09:<\/em><\/p>\n \u5982\u679cchroot_local_user=YES \u5e76\u4e14 chroot_list_enable=NO \u7684\u65f6\u5019\u90a3\u5217\u8868\u540d\u5355\u4e5f\u5c31\u4e0d\u751f\u6548\u4e86\uff0c\u56e0\u6b64\u6ee1\u8db3\u4e0a\u9762\u7684\u6761\u4ef6\u65f6\uff0c\u6240\u6709\u7684FTP\u7528\u6237\u5c06\u5168\u90e8\u9501\u5b9a\u5728\u4e3b\u76ee\u5f55\u3002<\/em><\/p>\n ls_recurse_enable=YES \u00a0#\u542f\u7528\u9012\u5f52<\/p>\n listen=YES \u00a0#\u4f7f\u7528IPV4\u65f6\u8bbe\u7f6e\u4e3aYES<\/p>\n listen_ipv6=NO\u00a0\u00a0\u00a0#\u4f7f\u7528IPV6\u65f6\u8bbe\u7f6e\u4e3aYES<\/p>\n local_root=\/data\/ftproot \u00a0 \u00a0#\u6307\u5b9a\u6839\u76ee\u5f55\uff0c\u5982\u679c\u672a\u6307\u5b9a\uff0c\u7528\u6237\u7684\u5bbf\u4e3b\u76ee\u5f55\u5c06\u4f5c\u4e3aFTP\u4e3b\u76ee\u5f55<\/p>\n use_localtime=YES \u00a0# use localtime<\/p>\n seccomp_sandbox=NO \u00a0 \u00a0 #turn off for seccomp filter ( if you cannot login, add this line )<\/p>\n 3\u3001\u4fee\u6539shells\u914d\u7f6e<\/strong><\/em><\/em><\/em><\/em><\/p>\n \u7f16\u8f91shell\u7684\u914d\u7f6e\u6587\u4ef6\/etc\/shells\uff0c\u5982\u679c\u6587\u4ef6\u4e2d\u6ca1\u6709\/sbin\/nologin\u6216\u8005usr\/sbin\/nologin\uff0c\u5728\u6587\u4ef6\u4e2d\u8ffd\u52a0\u8be5\u4e0a\u5373\u53ef\u3002<\/p>\n 4\u3001\u914d\u7f6e\u9632\u706b\u5899<\/strong><\/p>\n \u7f16\u8f91\/etc\/sysconfig\/iptables\u6587\u4ef6\uff0c\u5728REJECT\u884c\u4e4b\u524d\u6dfb\u52a0\u5982\u4e0b\u547d\u4ee4\uff1a<\/p>\n -A INPUT -m state –state NEW -m tcp -p tcp –dport 21 -j ACCEPT \u00a0#\u4ece\u4e0a\u4e00\u884c\u4e2d\u8fdb\u884c\u590d\u5236\u7c98\u8d34\u540e\u4fee\u6539\u7aef\u53e3\u53f7\u4e3a21\u5373\u53ef<\/p>\n \u6dfb\u52a0\u540e\u4fdd\u5b58\uff0c\u7136\u540e\u91cd\u542f\u9632\u706b\u5899\u670d\u52a1\u3002<\/p>\n [root@localhost ~]# service iptables restart \u00a0#\u5176\u5b83\u547d\u4ee4\uff1aservice iptables stop\u505c\u6b62\u9632\u6b62\u5899\u670d\u52a1<\/p>\n \u516d\u3001\u542f\u52a8vsftp\u5e76\u6d4b\u8bd5\u767b\u9646<\/strong><\/p>\n \u542f\u52a8vsftp\u670d\u52a1<\/p>\n [root@localhost ~]# service vsftpd start\u00a0#\u5176\u5b83\u547d\u4ee4\uff1aservice vsftpd restart\u91cd\u542fFTP\u670d\u52a1\u3001service vsftpd stop\u505c\u6b62FTP\u670d\u52a1<\/p>\n \u670d\u52a1\u6210\u529f\u542f\u52a8\u540e\uff0c\u7528FTP\u5ba2\u6237\u7aef\u767b\u9646\u5373\u53ef\uff08\u63a8\u8350\u4f7f\u7528Xshell<\/a> \uff09\uff0cftpadmin\u7ba1\u7406\u76ee\u5f55\u662f\/www\/web\u3002<\/p>\n \u4e03\u3001\u9519\u8bef\u5904\u7406<\/strong><\/p>\n 1\u3001500 OOPS: cannot change directory:\/home\/www<\/p>\n \u8be5\u9519\u8bef\u539f\u56e0\u662f\u5728CentOS\u7cfb\u7edf\u4e0b\u9ed8\u8ba4\u5b89\u88c5\u4e86SELinux\uff0c\u6ca1\u6709\u5f00\u542fFTP\u652f\u6301\uff0c\u6240\u4ee5\u8bbf\u95ee\u65f6\u90fd\u88ab\u963b\u6b62\u4e86\uff0c\u9700\u8981\u624b\u52a8\u5f00\u542f\u3002<\/p>\n [root@localhost ~]#\u00a0getsebool -a|grep ftp \u00a0 #\u67e5\u770b\u6240\u6709ftp\u8bbe\u7f6e<\/p>\n [root@localhost ~]# setsebool ftp_home_dir 1 \u00a0#setsebool -P ftp_home_dir 1 \u4f7f\u7528P\u53c2\u6570\u5b9e\u73b0\u91cd\u542f\u540eftp_home_dir\u81ea\u52a8\u4e3a1<\/p>\n","protected":false},"excerpt":{"rendered":" vsftpd\u662f\u4e00\u6b3e\u5728Linux\u53d1\u884c\u7248\u4e2d\u6700\u53d7\u63a8\u5d07\u7684FTP\u670d\u52a1\u5668\u7a0b\u5e8f\u3002\u7279\u70b9\u662f\u5c0f\u5de7\u8f7b\u5feb … Continue reading