您的位置:首页 > 编程语言 > PHP开发

lunix 的ssh的sftp使用chrootDirectory来限制用户根目录局限性:没太大意义

2013-03-28 16:49 489 查看
ChrootDirectory
Specifies the pathname of a directory to chroot(2) to after
authentication. All components of the pathname must be root-
owned directories that are not writable by any other user or
group. After the chroot, sshd(8) changes the working directory
to the user's home directory.

The pathname may contain the following tokens that are expanded
at runtime once the connecting user has been authenticated: %% is
replaced by a literal '%', %h is replaced by the home directory
of the user being authenticated, and %u is replaced by the
username of that user.

The ChrootDirectory must contain the necessary files and
directories to support the user's session. For an interactive
session this requires at least a shell, typically sh(1), and
basic /dev nodes such as null(4), zero(4), stdin(4), stdout(4),
stderr(4), arandom(4) and tty(4) devices. For file transfer
sessions using ``sftp'', no additional configuration of the
environment is necessary if the in-process sftp server is used,
though sessions which use logging do require /dev/log inside the
chroot directory (see sftp-server(8) for details).

The default is not to chroot(2).

如果按照它上面的说法.
单在一个网站的不同目录分配给不同用户来管理这个需求就无法实现了,且会搞出很多没必要的文件来,对于网站.
有点不明白网络上需求那么简单?那么热忠于这个配置.
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: