vsftp访问异常
在LINUX下vsftp建立一个FTP服务器,但通过ftp的命令控制台使用FTP时,ls无法查看目录, 当然更无法上传下载文件了!
出错如下 :
ftp> ls
227 Entering Passive Mode (192,168,2,222,110,161)
150 Here comes the directory listing.
226 Directory send OK.
ftp> ls
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.
226 Directory send OK.
查看ftp的命令
ftp> help
Commands may be abbreviated. Commands are:
! cr mdir proxy send
$ delete mget sendport site
account debug mkdir put size
append dir mls pwd status
ascii disconnect mode quit struct
bell form modtime quote system
binary get mput recv sunique
bye glob newer reget tenex
case hash nmap rstatus trace
ccc help nlist rhelp type
cd idle ntrans rename user
cdup image open reset umask
chmod lcd passive restart verbose
clear ls private rmdir ?
close macdef prompt runique
cprotect mdelete protect safe
通过 passive 开启和关闭 PASV模式, 再ls 也是同样的问题, 最后在网上找到了解决办法,最重要的是man ftpd_selinux,解决这个问题只要:
1. setsebool -P ftpd_disable_trans 1
2. service vsftpd restart
当然了,解决这个问题的办法还有一个, 就是禁用selinux
如何禁用呢?
vi /etc/sysconfig/selinux
SELINUX=enforcing --> SELINUX=disabled
但是这个修改需要重新启动计算机,reboot 一下。
下面是其他常见的setsebool 命令
BOOLEANS
SELinux policy is based on least privilege required and may also be customizable by setting
a boolean with setsebool.
Allow ftp servers to read and write files with the public_content_rw_t file type.
setsebool -P allow_ftpd_anon_write on
Allow ftp servers to read or write files in the user home directories.
setsebool -P ftp_home_dir on
Allow ftp servers to read or write all files on the system.
setsebool -P allow_ftpd_full_access on
Allow ftp servers to use cifs for public file transfer services.
setsebool -P allow_ftpd_use_cifs on
Allow ftp servers to use nfs for public file transfer services.
setsebool -P allow_ftpd_use_nfs on
system-config-selinux is a GUI tool available to customize SELinux policy settings.