虾击吧扯

吃鸡巴亏上鸡巴当倒鸡巴霉!

开启sftp功能方法

在/usr/local/directadmin/custombuild/files.list添加文件列表


/usr/lib64/libnss3.so
/usr/lib64/libnss_db.so
/usr/lib64/libnss_files.so
/usr/lib64/libnss_ldap.so
/usr/lib64/libnss_nisplus.so
/usr/lib64/libnssutil3.so
/usr/lib64/libnss_compat.so
/usr/lib64/libnss_dns.so
/usr/lib64/libnss_hesiod.so
/usr/lib64/libnss_nis.so
/usr/lib64/libnssckbi.so
/lib64/libnss_compat-2.5.so
/lib64/libnss_db-2.2.so
/lib64/libnss_dns-2.5.so
/lib64/libnss_files-2.5.so
/lib64/libnss_hesiod-2.5.so
/lib64/libnss_ldap-2.5.so
/lib64/libnss_nis-2.5.so
/lib64/libnss_nisplus-2.5.so
/lib64/libnss_compat.so.2
/lib64/libnss_db.so.2
/lib64/libnss_dns.so.2
/lib64/libnss_files.so.2
/lib64/libnss_hesiod.so.2
/lib64/libnss_ldap.so.2
/lib64/libnss_nis.so.2
/lib64/libnss_nisplus.so.2
 


 然后修改/usr/local/directadmin/custombuild/jail_user.sh

找到mkdir -p $USER_HOME/usr/bin并添加代码


mkdir -p $USER_HOME/dev
mknod $USER_HOME/dev/null c 1 3
chown $1:$1 $USER_HOME/dev/null


开启子用户的wget功能,ssh命令直接执行


echo /usr/bin/wget>/usr/local/directadmin/custombuild/files.list


最后执行更新指定用户使其生效

/usr/local/directadmin/custombuild/jail_user.sh username

这样就可以在其他地方使用sftp管理了!


 cd /usr/local/src
wget http://olivier.sessink.nl/jailkit/jailkit-2.11.tar.gz
tar -zxf jailkit-2.11.tar.gz
cd jailkit-2.11
./configure
make && make install
cp extra/jailkit /etc/init.d/jailkit
chmod 755 /etc/init.d/jailkit
chkconfig jailkit on

mkdir /var/chroot
chown root:root /var/chroot
#jk_init -v -j /var/chroot sftp scp jk_lsh extendedshell
jk_init -v -j /var/chroot ssh

useradd chroot-user
passwd chroot-user
#passwd chroot-user:extra/jailkit
jk_jailuser -m -n -j /var/chroot --shell=/bin/bash chroot-user


mkdir /home/chroot-user
mount --bind /var/chroot/home/chroot-user /home/chroot-user

#====
#执行/usr/sbin/jk_addjailuser [OPTIONS] chrootdir username
#建立受限用户,受限用户的组均隶属于users组

Powered by Typecho. Trapecho theme by 咳嗽di小鱼.