关于vsftpd的多个进程的问题

[zhang380252518]

1）使用root启动vsftpd，得到如下进程
root 12957 1 0 00:30 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
2）使用任意用户连接ftp上传文件，上传提示失败
3）此时查看进程发现有三个进程：
root 12957 1 0 00:30 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
nobody 13057 12957 0 00:32 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
mqm 13062 13057 0 00:32 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
4）[root@CLOUD173 xinetd.d]# service vsftpd status
vsftpd (pid 13062 12957) 正在运行...


求大神指点下为什么会出现这种情况；
vsftpd.conf 配置如下：
local_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
listen=YES
local_root=/opt/BOCO.MQ/
pam_service_name=vsftpd
write_enable=YES

[小笨和漂向北方]

is there any log entry in /var/log/message? what's the status of ur SELinux?

[空的]

多个进程是正常的，说明有人想连上来 连接成功之后nobody就不见了~

[zhang380252518]

引用 2 楼 erhou134 的回复:

多个进程是正常的，说明有人想连上来 连接成功之后nobody就不见了~

哦，我发现确实这样，现在明白了，不过还有个小问题就是关于本地用户权限的问题，mqm是我的本地用户，传输文件失败，我执行 setsebool allow_ftpd_full_access on 就可以成功了，但是在网上查allow_ftpd_full_access 控制的是匿名用户要上传文件 我本地用户也不是匿名的啊，我是登录这个用户输入密码才连接ftp的，为什么本地用户上传文件的权限由匿名用户要上传文件控制呢？

[zhang380252518]

引用 1 楼 micropentium6 的回复:

is there any log entry in /var/log/message? what's the status of ur SELinux?

[root@CLOUD173 log]#tail -f messages Sep 5 17:14:23 CLOUD173 kernel: type=1400 audit(1409908463.245:38437): avc: denied { write } for pid=6585 comm="vsftpd" name="mqm" dev=sda8 ino=129895 scontext=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir [root@CLOUD173 vsftpd]# sestatus -b | grep ftp allow_ftpd_anon_write off allow_ftpd_full_access off allow_ftpd_use_cifs off allow_ftpd_use_nfs off ftp_home_dir on ftpd_connect_db off httpd_enable_ftp_server off tftp_anon_write off the question is solved by executing 'setsebool allow_ftpd_full_access on' I have another question :mqm is local user,why the question is solved by executing 'setsebool allow_ftpd_full_access on'? 我英文不好啊 我就是有个疑问，我在网上查allow_ftpd_full_access 是控制匿名用户的上传，为啥我本地用户上传没权限也需要执行它呢？

[小笨和漂向北方]

引用 3 楼 zhang380252518 的回复:

[quote=引用 2 楼 erhou134 的回复:] 多个进程是正常的，说明有人想连上来 连接成功之后nobody就不见了~

哦，我发现确实这样，现在明白了，不过还有个小问题就是关于本地用户权限的问题，mqm是我的本地用户，传输文件失败，我执行 setsebool allow_ftpd_full_access on 就可以成功了，但是在网上查allow_ftpd_full_access 控制的是匿名用户要上传文件 我本地用户也不是匿名的啊，我是登录这个用户输入密码才连接ftp的，为什么本地用户上传文件的权限由匿名用户要上传文件控制呢？[/quote] so, you think who helped u solve the puzzle?

[小笨和漂向北方]

引用 4 楼 zhang380252518 的回复:

[quote=引用 1 楼 micropentium6 的回复:] is there any log entry in /var/log/message? what's the status of ur SELinux?

[root@CLOUD173 log]#tail -f messages Sep 5 17:14:23 CLOUD173 kernel: type=1400 audit(1409908463.245:38437): avc: denied { write } for pid=6585 comm="vsftpd" name="mqm" dev=sda8 ino=129895 scontext=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir [root@CLOUD173 vsftpd]# sestatus -b | grep ftp allow_ftpd_anon_write off allow_ftpd_full_access off allow_ftpd_use_cifs off allow_ftpd_use_nfs off ftp_home_dir on ftpd_connect_db off httpd_enable_ftp_server off tftp_anon_write off the question is solved by executing 'setsebool allow_ftpd_full_access on' I have another question :mqm is local user,why the question is solved by executing 'setsebool allow_ftpd_full_access on'? 我英文不好啊 我就是有个疑问，我在网上查allow_ftpd_full_access 是控制匿名用户的上传，为啥我本地用户上传没权限也需要执行它呢？[/quote] your audit.log was written to the messages... is mqm a system account? usually, the reason for using vsftp is that it allows u to create virtual users and virtual folder structure.

[小笨和漂向北方]

allow_ftpd_full_access (FTP) Allow ftpd to full access to the system it doesn't matter if the user is anonymous besides, you might want to add -P flat to sebool, otherwise the setting will be discarded after reboot...

[zhang380252518]

引用 7 楼 micropentium6 的回复:

allow_ftpd_full_access (FTP) Allow ftpd to full access to the system it doesn't matter if the user is anonymous besides, you might want to add -P flat to sebool, otherwise the setting will be discarded after reboot...

Thank you very much！you do me a lot favour