FTP Server

Server configuration:-

Anonmyous user (for upload).

1. Package installed  yum install vsftpd* -y
2. Vim /etc/vsftpd/vsftpd.config (make entry)

Line no.27 and 31 make a uncomment. For uncomment removed (#)hash.

#27 no.= anon_upload_enable=yes

#31 no.=anon_mkdir_write_enable=yes

3. Save & exit.
4. Service vsftpd restart
5. Chkconfig vsftpd on
6. Getsebool -a | grep ftp (to check ftp permission level)
7. Man ftpd_selinux (see ftpd manual page by thiazcvs command)
8. Setsebool -P allow_ftpd_anon_write on (set selinux permission level & booliance of selinux)
9. Chcon –R –t public_content_rw_t /var/ftp/pub/ (set to read & write permission , level & content)
10. ls –lZd /var/ftp/pub/ (to cross check permission setting )
11. chmod 777 –R /var/ftp/pub/ (set to ftp full permission)

Client side configuration:-

ftp 192.168.0.12 (server ip) (connect to the server by ftp)

put post.log (file transfering one system to another system)

# Assign new directory to Anonmyous user. (download)

1. Lcd ( use this command to specified path)
2. Mkdir –p /anon/anondir (create a directory to the name of /anon/anondir)
3. Vim /etc/vsftpd/vsftpd.conf (make some changes in vsftpd file)
4. Allow anonymous FTP? (Beware - allowed by default if you comment this out)

anonymous_enable=YES

anon_root=/anon (to set permission to access directory)

5. Service vsftpd restart
6. ls –lZd /anon/anondir/
7. chcon –R –t public_content_rw_t /anon/anondir/ (to set read & write permission)
8. ls –lZd /anon/anondir/ (cross check by this command)
9. getsebool –a |grep ftp

showing like this:- ftp_home_dir --> of (on this directory by below command)

setsebool –P ftp_home_dir --> on (Hit enter key)

# Upload from New directory

1. Vim /etc/vsftpd/vsftpd.conf
2. #27 no.= anon_upload_enable=yes

#31 no.= anon_write_enable=yes

Local_enable=yes (make uncomment this line)

3. Chcon –R –t public_content_rw_t /anon/anondir ( set content level or say that permission to read & write)
4. Getsebool –a |grep ftp ( to check status it’s showning on or not)
5. Chmod 777 /anon/anondir (set full permission to access)

# user level access (FTP) (Assign new directory to local users)

1. Mkdir /data - 1^st create a new directory
2. Vim /etc/vsftpd/vsftpd.conf
3. Uncomment a line given below to access a local users

# Local_enable=yes

# Local_root=/data

4. Service vsftpd restart ssss
5. Chcon –R –t user_home_dir_rw_t /data (set content to home directory to read & write permission )
6. Getsebool –a |grep ftp (see to check status of permission,it’s on or off)
7. Setsebool –P user_home_dir on
8. Chmod 777 –R /data (set full permission to access /data directory)

# Root level access

1. Cd /etc/vsftpd (1^st change working directory by cd command)
2. Vim ftpusers ( enter in edit mode)
3. #root (superuser) make a comments with #(hash) to root & set to access ftp by root.
4. Vim user_list (make some change by edit mode)
5. #root  make a comments with # to superuser for login by root.
6. Service vsftpd restart or /etc/init.d/vsftpd restart  use to restart services by this cmd .