% e0 o4 J+ b* j3 R
:vsftpd.conf配置
/ S* `: \! |" i* O$ ]! ranonymous_enable=NO
5 }5 `, F) C: G, H& e$ h/ llocal_enable=YES
, g% [, L" i1 y4 \) ]6 \write_enable=YES 8 G, H4 @1 p. @& q
local_umask=022 / V @1 v# V/ ]9 @5 a2 B
anon_upload_enable=YES
6 U% i# s+ g5 u; _2 r+ C! xanon_mkdir_write_enable=YES 5 K4 g( ~2 k# ~3 W* d9 {
dirmessage_enable=YES
: o3 h$ b" X2 @9 y% N3 `/ Jxferlog_enable=YES ' |; E3 w9 s7 u6 j
connect_from_port_20=YES 9 _5 T9 T8 |& y2 e9 `
xferlog_std_format=YES + d) y* @. s! K9 H A
chroot_local_user=YES
/ m" U) M( K7 g) r8 |& tchroot_list_file=/etc/vsftpd/chroot_list . l% e' y, W2 c; T! m; g6 p
listen=YES ' g' N7 c5 K* p5 Z; Z! E2 I
listen_port=2689 : ~% J8 c+ w# m; {& Q
pam_service_name=vsftpd
0 B1 U: P$ P p7 Z* A: ]userlist_enable=YES
! W# p# s& z6 _1 Ltcp_wrappers=YES
, v. ^" ]3 p0 M2 U" [9 I( f3 B
+ O* M$ ?9 K8 Y+ Y& L添加用户指定用户目录
, j& g2 J; D7 a' B& G1 b# E给权限
# T6 J( Q0 L0 r$ i! Z
1 ?4 w2 e! G: ^useradd -d hmh
# a. ?6 i' w% W/ t" e6 K" N 2 B& e' W: [. X) K$ j3 Q! O5 i2 S4 v
# useradd -d /home/www-data/public_html/xiuqi.orghmh c, w' {1 u2 J* s# O
# vim /etc/vsftpd/chroot_list
8 u3 |( |7 O$ t5 p- R' r保证所在目录能读权限。 1 Z6 R) S- R |; M* d
8 M) D% S0 b1 e) M- I[root@134 /]# lsattr /etc/group 1 ^! n8 D" |" F2 D U
----i--------e- /etc/group
1 Y3 q7 ]. q. H2 j. r[root@134 /]# chattr -i /etc/group 6 G: J' R3 D7 i/ i r
[root@134 /]# lsattr /etc/group
* L8 ]# m2 n* m7 j) ]( ^-------------e- /etc/group
9 \( C. o& X) K/ m2 y6 m* S% q[root@134 /]# useradd -s /sbin/nologin mmlt 0 o+ i% T9 q. w0 T8 L: _% A) \
useradd: cannot open /etc/gshadow " r- {/ g3 r7 k2 j, N( o5 Z X
[root@134 /]# chattr -i /etc/passwd ! ?% G% `4 u# G. D" D, `
[root@134 /]# chattr -i /etc/gshadow
+ x1 W& r2 R0 A: C! J6 `[root@134 /]# useradd -s /sbin/nologin mmlt 9 H1 d$ J$ {2 W3 l
[root@134 /]# useradd -d/home/www-data/public_html/meimengluntan/ mmlt
# c: ~# ?! t- W- Q# F
' k0 x! A3 H- z5 J. T! |( J7 L* x y a- H4 G: p
[root@134 /]# passwd mmlt ) @, ]) D7 E1 }; `' e1 w
Changing password for user mmlt.
9 o7 y% M. F( c4 wNew password: 6 h, @7 F4 C! V
BAD PASSWORD: it is based on a dictionaryword
3 _, k: N7 z# C' G8 D7 IRetype new password: - Y y3 @# h3 G6 W, P4 y y1 V' e
passwd: all authentication tokens updatedsuccessfully. 8 x& `, ]! g+ { C( F( D' v
|