vsftp

安装

sudo apt-get install vsftpd

操作

sudo /etc/init.d/vsftpd stop

sudo /etc/init.d/vsftpd start

sudo /etc/init.d/vsftpd restart

创建用户

sudo useradd -g ftp -d /home/ftpuser -s /sbin/nologin ftpuser

sudo passwd ftpuser

sudo useradd -d /home/web_test -s /bin/sh web_test

sudo passwd web_test

目录权限

sudo chown -R root:root web_test

sudo chmod -R 755 web_test

添加用户完成后一定是可以ftp登录的。但是会访问父级目录的数据。为了安全考虑需要通过在/etc/vsftpd.chroot_list 来设置禁止那些用户访问上级目录

sudo vim /etc/vsftpd.chroot_list

配置

sudo vim /etc/vsftpd.conf

#关键配置，是否不允许指定的用户不能切换到上一级目录。

chroot_local_user=No

#

# You may specify an explicit list of local users to chroot() to their home

# directory. If chroot_local_user is YES, then this list becomes a list of

# users to NOT chroot().

# (Warning! chroot'ing can be very dangerous. If using chroot, make sure that

# the user does not have write access to the top level directory within the

# chroot)

chroot_list_enable=YES

chroot_list_file=/etc/vsftpd.chroot_list

#允许用户登录ftp的列表

sudo vim /etc/vsftpd.chroot_list

例如运行如下用户登录

admin

web_test

ftpuser

#在/etc/ftpusers里的用户都不能登录ftpd

例如禁止如下登录

sudo vim /etc/ftpusers

# /etc/ftpusers: list of users disallowed FTP access. See ftpusers(5).

root

daemon

bin

sys

sync

games

man

lp

mail

news

uucp

nobody

================================================

ftpuser:x:1007:129::/home/ftpuser:/usr/sbin/nologin

web_test:x:1008:1008::/home/web_test:/usr/sbin/nologin

/etc/shells

/bin/sh

/bin/dash

/bin/bash

/bin/rbash

/usr/bin/tmux

/usr/sbin/nologin

====================================================

ftp 127.0.0.1

ftp> dir

ftp> cdup

ftp> dir

ftp> quit