▒ 생각한 대로 살지 않으면 살아온 대로 생각하게 될 것이다. ▒

[root@localhost ~]# service vsftpd stop

[root@localhost ~]#
[root@localhost ~]# rpm -e vsftpd-2.0.5-28.el5
warning: /etc/vsftpd/vsftpd.conf saved as /etc/vsftpd/vsftpd.conf.rpmsave
[root@localhost ~]#

[root@localhost ~]# tar xvzf vsftpd-3.0.2.tar.gz

[root@localhost ~]# cd vsftpd-3.0.2

[root@localhost vsftpd-3.0.2]# vi opts.c

/*
 * Part of Very Secure FTPd
 * Licence: GPL v2
 * Author: Chris Evans
 * opts.c
 *
 * Routines to handle OPTS.
 */

#include "ftpcodes.h"
#include "ftpcmdio.h"
#include "session.h"

void
handle_opts(struct vsf_session* p_sess)
{
  str_upper(&p_sess->ftp_arg_str);
  /* if (str_equal_text(&p_sess->ftp_arg_str, "UTF8 ON"))
  {
    vsf_cmdio_write(p_sess, FTP_OPTSOK, "Always in UTF8 mode.");
  }
  else
  {
    vsf_cmdio_write(p_sess, FTP_BADOPTS, "Option not understood.");
  } */
} 

(vsftpd 3.0.2 기준 171 번 라인 주석처리)

str_replace_unprintable(p_str, '?');   ->     /*  str_replace_unprintable(p_str, '?'); */

[root@localhost vsftpd-3.0.2]# vi postlogin.c

(vsftpd 3.0.2 기준 136 번 라인 주석처리)

str_replace_unprintable(&proctitle_str, '?');    ->    /* str_replace_unprintable(&proctitle_str, '?'); */

[root@localhost vsftpd-3.0.2]# vi builddefs.h

(vsftpd 3.0.2 기준 4 번 라인 수정하여 TCP_WRAPPERS 기능 활성)

#undef VSF_BUILD_TCPWRAPPERS    ->    #define VSF_BUILD_TCPWRAPPERS

[root@localhost vsftpd-3.0.2]# vi vsf_findlibs.sh

(vsftpd 3.0.2 기준 16 번, 52번 라인 수정)

- 16번 라인

locate_library /lib/libpam.so.0 && echo "/lib/libpam.so.0";    ->   locate_library /lib/libpam.so.0 && echo "/lib64/libpam.so.0";

- 52번 라인

  echo "/lib/libcap.so.1";    ->      echo "/lib64/libcap.so.1";

[root@localhost vsftpd-3.0.2]# make

[root@localhost vsftpd-3.0.2]# make install

[root@localhost vsftpd-3.0.2]# cp RedHat/vsftpd.pam /etc/pam.d/vsftpd

[root@localhost vsftpd-3.0.2]#

(2번째 라인의 ftpusers 파일 위치 수정)

auth       required     /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed

auth       required     /lib/security/pam_unix.so shadow nullok
auth       required     /lib/security/pam_shells.so
account    required     /lib/security/pam_unix.so
session    required     /lib/security/pam_unix.so

↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓

auth       required     /lib64/security/pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed

auth       required     /lib64/security/pam_unix.so shadow nullok
auth       required     /lib64/security/pam_shells.so
account    required     /lib64/security/pam_unix.so
session    required     /lib64/security/pam_unix.so

[root@localhost vsftpd-3.0.2]# echo "root" >  /etc/vsftpd/ftpusers               (root 와 같은 시스템권한의 유저는 로그인을 불가하도록 추가합니다.)

[root@localhost vsftpd-3.0.2]# touch /etc/init.d/vsftpd 

[root@localhost vsftpd-3.0.2]# chmod 755 /etc/init.d/vsftpd

#!/bin/bash
#
# vsftpd      This shell script takes care of starting and stopping
#             standalone vsftpd.
#
# chkconfig: - 60 50
# description: Vsftpd is a ftp daemon, which is the program \
#              that answers incoming ftp service requests.
# processname: vsftpd
# config: /etc/vsftpd/vsftpd.conf
# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0

[ -x /usr/local/sbin/vsftpd ] || exit 0

RETVAL=0
prog="vsftpd"

start() {
        # Start daemons.

        if [ -d /etc/vsftpd ] ; then
                for i in `ls /etc/vsftpd/*.conf`; do
                        site=`basename $i .conf`
                        echo -n $"Starting $prog for $site: "
                        /usr/local/sbin/vsftpd $i &
                        RETVAL=$?
                        [ $RETVAL -eq 0 ] && {
                           touch /var/lock/subsys/$prog
                           success $"$prog $site"
                        }
                        echo
                done
        else
                RETVAL=1
        fi
        return $RETVAL
}

stop() {
        # Stop daemons.
        echo -n $"Shutting down $prog: "
        killproc $prog
        RETVAL=$?
        echo
        [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/$prog
        return $RETVAL
}

# See how we were called.
case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  restart|reload)
        stop
        start
        RETVAL=$?
        ;;
  condrestart)
        if [ -f /var/lock/subsys/$prog ]; then
            stop
            start
            RETVAL=$?
        fi
        ;;
  status)
        status $prog
        RETVAL=$?
        ;;
  *)
        echo $"Usage: $0 {start|stop|restart|condrestart|status}"
        exit 1
esac

exit $RETVAL

[root@localhost vsftpd-3.0.2]# chkconfig vsftpd on                (자동 실행 되도록 합니다.)

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=NO
data_connection_timeout=120
chroot_local_user=YES
allow_writeable_chroot=YES
listen=YES

pam_service_name=vsftpd
tcp_wrappers=YES

max_clients=20
max_per_ip=5
local_max_rate=10000000
use_localtime=YES
connect_timeout=600
accept_timeout=60
ftp_data_port=20
listen_port=21000
pasv_enable=YES
pasv_min_port=30000
pasv_max_port=31000
file_open_mode=0644
async_abor_enable=NO

dirlist_enable=YES
session_support=YES

[root@localhost vsftpd-3.0.2]# tail --f /var/log/vsftpd.log

Wed Dec  3 10:28:24 2014 [pid 14163] [webadmin] OK MKDIR: Client "192.168.0.222", "/새 폴더"

Wed Dec  3 10:28:25 2014 [pid 14163] [webadmin] OK MKDIR: Client "192.168.0.222", "/새 폴더1"

[root@localhost vsftpd-3.0.2]# mv vsftpd.log vsftpd.log.bak