2019/07/19

VSFTPD install and configuration

Hello!



today, I retried to install the VSFTPD daemon.

yesterday, I had suffered some bugs and misconfiguration.

but I did it!



[/etc/vsftpd.conf]=====================================================

listen=YES

local_enable=YES

write_enable=YES

local_umask=022

anonymous_enable=YES

anon_root=/storage

anon_upload_enable=YES

anon_mkdir_write_enable=YES

anon_other_write_enable=YES

anon_umask=022

chroot_local_user=YES

allow_writable_chroot=YES

======================================================================



and then restart VSFTPD daemon!



of course, Ubuntu doesn't need to set SELiunx security enforcement.

if you use CentOS, you should fix SELinux security configuration.



[CentOS SELinux Configuration]========================================

[root@localhost test]# getsebool -a | grep ftp
ftp_home_dir --> off
ftpd_anon_write --> off
ftpd_connect_all_unreserved --> off
ftpd_connect_db --> off
ftpd_full_access --> off
ftpd_use_cifs --> off
ftpd_use_fusefs --> off
ftpd_use_nfs --> off
ftpd_use_passive_mode --> off
httpd_can_connect_ftp --> off
httpd_enable_ftp_server --> off
sftpd_anon_write --> off
sftpd_enable_homedirs --> off
sftpd_full_access --> off
sftpd_write_ssh_home --> off
tftp_anon_write --> off
tftp_home_dir --> off

[root@localhost test]# setsebool -P ftp_home_dir on
[root@localhost test]# setsebool -P ftpd_full_access on
[root@localhost test]# setsebool -P ftpd_anon_write on

======================================================================


and, you MUST set permission 755 and owner root:root for shared directory.



CentOS VSFTPD Configuration.txt
CentOS VSFTPD SELinux Configuration.txt
Ubuntu VSFTPD Configuration.txt



Good luck!

No comments:

Post a Comment