{"id":19247,"date":"2016-08-02T06:05:22","date_gmt":"2016-08-01T22:05:22","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/02\/%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-vsftpd-ftp-server\/"},"modified":"2016-08-02T06:05:22","modified_gmt":"2016-08-01T22:05:22","slug":"%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-vsftpd-ftp-server","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/02\/%e5%9c%a8-centos-7-x-%e4%b8%8a%e4%bd%bf%e7%94%a8-vsftpd-ftp-server\/","title":{"rendered":"\u5728 CentOS 7.x \u4e0a\u4f7f\u7528 vsftpd FTP Server"},"content":{"rendered":"

1. \u5b89\u88dd vsftpd FTP Server
# yum install -y vsftpd<\/span> <\/p>\n

2. \u4fee\u6539\u8a2d\u5b9a\u6a94 \/etc\/vsftpd\/vsftpd.conf<\/span>
# grep -v ^# \/etc\/vsftpd\/vsftpd.conf<\/span>
anonymous_enable=No<\/span>
local_enable=YES<\/span>
write_enable=YES<\/span>
local_umask=022<\/span>
dirmessage_enable=YES<\/span>
xferlog_enable=YES<\/span>
connect_from_port_20=YES<\/span>
xferlog_file=\/var\/log\/xferlog<\/span>
idle_session_timeout=600<\/span>
data_connection_timeout=120<\/span>
chroot_local_user=YES<\/span>
chroot_list_enable=YES<\/span>
chroot_list_file=\/etc\/vsftpd\/chroot_list<\/span>
allow_writeable_chroot=YES<\/span>
listen=YES<\/span> <\/p>\n

pam_service_name=vsftpd<\/span>
userlist_enable=YES<\/span>
tcp_wrappers=YES<\/span> <\/p>\n

pasv_enable=YES<\/span>
pasv_min_port=5000<\/span>
pasv_max_port=6000<\/span>
use_localtime=YES<\/span>[@more@]3. \u8b93 root \u53ef\u4ee5\u767b\u5165
# sed -i ‘s\/root\/#root\/’ \/etc\/vsftpd\/ftpusers<\/span>
# sed -i ‘s\/root\/#root\/’ \/etc\/vsftpd\/user_list<\/span> <\/p>\n

4. \u9650\u5236\u4f7f\u7528\u8005\u4e0d\u80fd\u5207\u63db\u5230\u5176\u5b83\u76ee\u9304\uff0croot \u53ef\u4ee5
# echo root > \/etc\/vsftpd\/chroot_list<\/span> <\/p>\n

5. SELinux \u5728 vsftpd FTP Server \u4e0a\u7684\u8a2d\u5b9a
# setsebool -P ftp_home_dir\u00a0 on<\/span>
# setsebool -P allow_ftpd_full_access\u00a0 on<\/p>\n

<\/span>6. \u8a2d\u5b9a\u958b\u6a5f\u6642\u555f\u52d5
# # systemctl enable vsftpd
Created symlink from \/etc\/systemd\/system\/multi-user.target.wants\/vsftpd.service to \/usr\/lib\/systemd\/system\/vsftpd.service.<\/span><\/span> <\/p>\n

7. \u555f\u52d5 vsftpd FTP Server
# systemctl start vsftpd<\/span> <\/p>\n

8. \u6aa2\u67e5 FTP Server \u662f\u5426\u6709\u6b63\u5e38\u555f\u52d5
# netstat -ant | grep :21<\/span>
tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0 0 0.0.0.0:21\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0:*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 LISTEN<\/span><\/p>\n

\u95dc\u65bc chroot \u4f7f\u7528\u8005\u7684\u53e6\u4e00\u7a2e\u505a\u6cd5
1. \u4fee\u6539 \/etc\/vsftpd\/vsftpd.conf<\/span> \u8a2d\u5b9a\u6a94
# grep ‘chroot’ \/etc\/vsftpd\/vsftpd.conf | grep -v ‘^#’<\/span>
chroot_local_user=NO <\/span>
chroot_list_enable=YES <\/span>
chroot_list_file=\/etc\/vsftpd\/chroot_list <\/span>
allow_writeable_chroot=YES<\/span> <\/p>\n

2. \u5efa\u7acb\u8981 chroot \u7684\u4f7f\u7528\u8005
# awk -F: ‘{if ($3>999) print $1}’ \/etc\/passwd | grep -v nfsnobody ><\/span> \/etc\/vsftpd\/chroot_list<\/span>
\u6216
# awk -F: ‘{if ($3>999&&$3<60000) print $1}’ \/etc\/passwd ><\/span> \/etc\/vsftpd\/chroot_list<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

1. \u5b89\u88dd vsftpd FTP Server # yum install -y vsftpd 2. \u4fee\u6539\u8a2d\u5b9a … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 CentOS 7.x \u4e0a\u4f7f\u7528 vsftpd FTP Server\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,130,136],"tags":[],"class_list":["post-19247","post","type-post","status-publish","format-standard","hentry","category-c-78462","category-c-78475","category-c-78481"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["648889"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19247"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19247"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19247\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}