客所思生产环境vsftp的两种配置

1.下载上传目录为tp用户家目录

[root@Ftp-server vsftpd]# ll
总用量 28
-rw-r--r-- 1 root root 7 11月 10 18:07 chroot_list
-rw-------. 1 root root 125 7月 24 08:49 ftpusers
drwxr-xr-x. 2 root root 4096 11月 11 11:26 userconf
-rw-------. 1 root root 361 7月 24 08:49 user_list
-rw------- 1 root root 5269 11月 11 14:39 vsftpd.conf
-rwxr--r--. 1 root root 338 7月 24 08:49 vsftpd_conf_migrate.sh

[root@Ftp-server ~]# cat /etc/vsftpd/vsftpd.conf |grep -v ^# |grep -v ^$
anonymous_enable=NO
local_enable=YES
write_enable=YES
file_open_mode=0777
local_umask=011
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
listen_port=1314
xferlog_std_format=YES
chroot_local_user=YES
listen=YES
pam_service_name=vsftpd
tcp_wrappers=YES
reverse_lookup_enable=NO
user_config_dir=/etc/vsftpd/userconf
pasv_enable=YES
pasv_min_port=1024(default:0(use any port))
pasv_max_port=65536(default:0(use any port))
chown_uploads=YES

[root@Ftp-server vsftpd]# cat chroot_list
xoxweb

[root@Ftp-server vsftpd]# cat ftpusers
# Users that are not allowed to login via ftp
root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

[root@Ftp-server vsftpd]# cat userconf/xoxweb
local_root= /data/ftproot/web/

[root@Ftp-server vsftpd]# cat user_list
# vsftpd userlist
# If userlist_deny=NO, only allow users in this file
# If userlist_deny=YES (default), never allow users in this file, and
# do not even prompt for a password.
# Note that the default vsftpd pam config also checks /etc/vsftpd/ftpusers
# for users that are denied.
root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

 

2.上传下载目录不是ftp用户的家目录

[root@app_sz ~]# ll /etc/vsftpd/
总用量 28
-rw-r--r-- 1 root root 33 8月 28 16:03 chroot_list
-rw------- 1 root root 126 6月 29 2015 ftpusers
drwxr-xr-x 2 root root 4096 1月 14 15:46 userconf
-rw------- 1 root root 362 9月 16 12:31 user_list
-rw------- 1 root root 4771 1月 12 18:52 vsftpd.conf
-rwxr--r-- 1 root root 338 2月 13 2013 vsftpd_conf_migrate.sh

[root@appsz2 vsftpd]# cat /etc/vsftpd/vsftpd.conf |grep -v ^# |grep -v ^$
anonymous_enable=NO
local_enable=YES
write_enable=YES
chroot_local_user=yes
chroot_list_file=/etc/vsftpd/chroot_list
userlist_enable=YES
user_config_dir=/etc/vsftpd/userconf
local_umask=777
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chown_uploads=YES
xferlog_std_format=YES
listen=YES
pam_service_name=vsftpd
tcp_wrappers=YES
reverse_lookup_enable=NO
connect_timeout=300

[root@app_sz ~]# cat /etc/vsftpd/chroot_list
wangzhenggang
lujiajun
yangfutao

[root@app_sz ~]# ls /etc/vsftpd/userconf/
lujiajun wangzhenggang yangfutao
[root@app_sz ~]# cat /etc/vsftpd/userconf/yangfutao
local_root= /usr/local/nginx/html

[root@app_sz vsftpd]# cat user_list
# vsftpd userlist
# If userlist_deny=NO, only allow users in this file
# If userlist_deny=YES (default), never allow users in this file, and
# do not even prompt for a password.
# Note that the default vsftpd pam config also checks /etc/vsftpd/ftpusers
# for users that are denied.
#root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

[root@app_sz vsftpd]# cat ftpusers
# Users that are not allowed to login via ftp
#root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody