ElmerZhang's Blog

系统环境：CentOS 5.3, vsftpd 2.0.5
登录时提示类似如下的错误：

C:\Documents and Settings\sdz>ftp 192.168.128.128
Connected to 192.168.128.128.
220 (vsFTPd 2.0.5)
User (192.168.128.128:(none)): web
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/www/html
Login failed.
ftp> bye
500 OOPS: child died

这常常是因为SELinux不允许vsftpd线程访问用户主目录造成的。解决方法为：
使用root用户登录，然后执行以下命令来赋予权限：
setsebool -P ftp_home_dir 1
然后重启vsftpd服务：
service vsftpd restart

最后我们来检查一下SELinux配置：getsebool -a | grep ftp

allow_ftpd_anon_write --> off
allow_ftpd_full_access --> off
allow_ftpd_use_cifs --> off
allow_ftpd_use_nfs --> off
allow_tftp_anon_write --> off
ftp_home_dir --> on
ftpd_disable_trans --> off
ftpd_is_daemon --> on
httpd_enable_ftp_server --> off
tftpd_disable_trans --> off

ftp_home_dir的值已经是on了，然后再尝试FTP登录，就可以成功登录了:

C:\Documents and Settings\sdz>ftp 192.168.128.128
Connected to 192.168.128.128.
220 (vsFTPd 2.0.5)
User (192.168.128.128:(none)): web
331 Please specify the password.
Password:
230 Login successful.
ftp> bye
221 Goodbye.

书签