Hello!
today, I retried to install the VSFTPD daemon.
yesterday, I had suffered some bugs and misconfiguration.
but I did it!
[/etc/vsftpd.conf]=====================================================
listen=YES
local_enable=YES
write_enable=YES
local_umask=022
anonymous_enable=YES
anon_root=/storage
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
anon_umask=022
chroot_local_user=YES
allow_writable_chroot=YES
======================================================================
and then restart VSFTPD daemon!
of course, Ubuntu doesn't need to set SELiunx security enforcement.
if you use CentOS, you should fix SELinux security configuration.
[CentOS SELinux Configuration]========================================
[root@localhost test]# getsebool -a | grep ftp
ftp_home_dir --> off
ftpd_anon_write --> off
ftpd_connect_all_unreserved --> off
ftpd_connect_db --> off
ftpd_full_access --> off
ftpd_use_cifs --> off
ftpd_use_fusefs --> off
ftpd_use_nfs --> off
ftpd_use_passive_mode --> off
httpd_can_connect_ftp --> off
httpd_enable_ftp_server --> off
sftpd_anon_write --> off
sftpd_enable_homedirs --> off
sftpd_full_access --> off
sftpd_write_ssh_home --> off
tftp_anon_write --> off
tftp_home_dir --> off
[root@localhost test]# setsebool -P ftp_home_dir on
[root@localhost test]# setsebool -P ftpd_full_access on
[root@localhost test]# setsebool -P ftpd_anon_write on
======================================================================
and, you MUST set permission 755 and owner root:root for shared directory.
CentOS VSFTPD Configuration.txt
CentOS VSFTPD SELinux Configuration.txt
Ubuntu VSFTPD Configuration.txt
Good luck!
No comments:
Post a Comment