【求助】問一個FTP的權限問題

[woodrew]

目前平臺如下：
RH 7.3
VSFTP

我想要建立一個gp1使用者，當然這樣也同時建立一個gp1群組，然後再分別建立其他使用者，並將這些使用者設定隸屬於gp1群組。

然後我希望讓gp1使用者以外的使用者相互間看不到別人上傳的檔案，也不能進入別人的目錄，但是gp1使用者可以進入所有gp1群組內使用者的目錄及上傳的檔案，我該怎麼設定？

搞了半天都沒辦法做出來，誰可以教我嗎？我搜尋了一下也沒看到相同的問題。

[qazwsx1234af]

手上沒機器, 先憑記憶~
1. 利用home directory 方式, 假如FTP目錄在/data, 而gp2 ~ gp10 的家目錄就設在/data/gp2~10 但gp1設在/data . 注1 把chroot_list_enable設死
2. 使用vsftpd內建的user_config_dir功能, 將各使用者相關rules設在user_config_dir 的目錄下 . 注2

更多文件您可以參考 http://vsftpd.beasts.org/vsftpd_conf.html Vsftpd online document



注1 : chroot_list_enable
If activated, you may provide a list of local users who are placed in a chroot() jail in their home directory upon login. The meaning is slightly different if chroot_local_user is set to YES. In this case, the list becomes a list of users which are NOT to be placed in a chroot() jail. By default, the file containing this list is /etc/vsftpd.chroot_list, but you may override this with the chroot_list_file setting.

註2. user_config_dir
This powerful option allows the override of any config option specified in the manual page, on a per-user basis. Usage is simple, and is best illustrated with an example. If you set user_config_dir to be /etc/vsftpd_user_conf and then log on as the user "chris", then vsftpd will apply the settings in the file /etc/vsftpd_user_conf/chris for the duration of the session. The format of this file is as detailed in this manual page! PLEASE NOTE that not all settings are effective on a per-user basis. For example, many settings only prior to the user's session being started. Examples of settings which will not affect any behviour on a per-user basis include listen_address, banner_file, max_per_ip, max_clients, xferlog_file, etc.
Default: (none)