{"id":1980,"date":"2017-03-24T13:14:57","date_gmt":"2017-03-24T05:14:57","guid":{"rendered":"http:\/\/cn.hostease.com\/xueyuan\/?p=1980"},"modified":"2025-01-13T20:14:02","modified_gmt":"2025-01-13T12:14:02","slug":"%e4%bd%bf%e7%94%a8-chroot-%e7%9b%91%e7%8b%b1%e9%99%90%e5%88%b6-ssh-%e7%94%a8%e6%88%b7%e8%ae%bf%e9%97%ae%e6%8c%87%e5%ae%9a%e7%9b%ae%e5%bd%95","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/xueyuan\/jishu\/%e4%bd%bf%e7%94%a8-chroot-%e7%9b%91%e7%8b%b1%e9%99%90%e5%88%b6-ssh-%e7%94%a8%e6%88%b7%e8%ae%bf%e9%97%ae%e6%8c%87%e5%ae%9a%e7%9b%ae%e5%bd%95\/","title":{"rendered":"\u4f7f\u7528 chroot \u76d1\u72f1\u9650\u5236 SSH \u7528\u6237\u8bbf\u95ee\u6307\u5b9a\u76ee\u5f55"},"content":{"rendered":"\n

\u5c06 SSH \u7528\u6237\u4f1a\u8bdd\u9650\u5236\u8bbf\u95ee\u5230\u7279\u5b9a\u7684\u76ee\u5f55\u5185\uff0c\u7279\u522b\u662f\u5728 web \u670d\u52a1\u5668\u4e0a\uff0c\u8fd9\u6837\u505a\u6709\u591a\u4e2a\u539f\u56e0\uff0c\u4f46\u6700\u663e\u800c\u6613\u89c1\u7684\u662f\u4e3a\u4e86\u7cfb\u7edf\u5b89\u5168\u3002\u4e3a\u4e86\u9501\u5b9a SSH \u7528\u6237\u5728\u67d0\u4e2a\u76ee\u5f55\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528 chroot<\/strong> \u673a\u5236\u3002<\/p>\n\n\n\n

\u5728\u8bf8\u5982 Linux \u4e4b\u7c7b\u7684\u7c7b Unix \u7cfb\u7edf\u4e2d\u66f4\u6539 root\uff08chroot<\/strong>\uff09\u662f\u5c06\u7279\u5b9a\u7528\u6237\u64cd\u4f5c\u4e0e\u5176\u4ed6 Linux \u7cfb\u7edf\u5206\u79bb\u7684\u4e00\u79cd\u624b\u6bb5\uff1b\u4f7f\u7528\u79f0\u4e3a chrooted \u76d1\u72f1<\/strong> \u7684\u65b0\u6839\u76ee\u5f55\u66f4\u6539\u5f53\u524d\u8fd0\u884c\u7684\u7528\u6237\u8fdb\u7a0b\u53ca\u5176\u5b50\u8fdb\u7a0b\u7684\u660e\u663e\u6839\u76ee\u5f55\u3002<\/p>\n\n\n\n

\u5728\u672c\u6559\u7a0b\u4e2d\uff0c\u6211\u4eec\u5c06\u5411\u4f60\u5c55\u793a\u5982\u4f55\u9650\u5236 SSH \u7528\u6237\u8bbf\u95ee Linux \u4e2d\u6307\u5b9a\u7684\u76ee\u5f55\u3002\u6ce8\u610f\uff0c\u6211\u4eec\u5c06\u4ee5 root \u7528\u6237\u8eab\u4efd\u8fd0\u884c\u6240\u6709\u547d\u4ee4\uff0c\u5982\u679c\u4f60\u4ee5\u666e\u901a\u7528\u6237\u8eab\u4efd\u767b\u5f55\u670d\u52a1\u5668\uff0c\u8bf7\u4f7f\u7528 sudo \u547d\u4ee4\u3002<\/p>\n\n\n\n

\u6b65\u9aa4 1\uff1a\u521b\u5efa SSH chroot \u76d1\u72f1<\/h3>\n\n\n\n

1\u3001 \u4f7f\u7528 mkdir \u547d\u4ee4\u5f00\u59cb\u521b\u5efa chroot \u76d1\u72f1\uff1a<\/p>\n\n\n\n

    \n
  1. #<\/span> mkdir<\/span> -<\/span>p <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

    2\u3001 \u63a5\u4e0b\u6765\uff0c\u6839\u636e sshd_config<\/code> \u624b\u518c\u627e\u5230\u6240\u9700\u7684\u6587\u4ef6\uff0cChrootDirectory<\/code> \u9009\u9879\u6307\u5b9a\u5728\u8eab\u4efd\u9a8c\u8bc1\u540e\u8981 chroot \u5230\u7684\u76ee\u5f55\u7684\u8def\u5f84\u540d\u3002\u8be5\u76ee\u5f55\u5fc5\u987b\u5305\u542b\u652f\u6301\u7528\u6237\u4f1a\u8bdd\u6240\u5fc5\u9700\u7684\u6587\u4ef6\u548c\u76ee\u5f55\u3002<\/p>\n\n\n\n

    \u5bf9\u4e8e\u4ea4\u4e92\u5f0f\u4f1a\u8bdd\uff0c\u8fd9\u9700\u8981\u81f3\u5c11\u4e00\u4e2a shell\uff0c\u901a\u5e38\u4e3a sh<\/code> \u548c\u57fa\u672c\u7684 \/dev<\/code> \u8282\u70b9\uff0c\u4f8b\u5982 null<\/code>\u3001zero<\/code>\u3001stdin<\/code>\u3001stdout<\/code>\u3001stderr<\/code> \u548c tty<\/code> \u8bbe\u5907\uff1a<\/p>\n\n\n\n

      \n
    1. #<\/span> ls<\/span> -<\/span>l <\/span>\/<\/span>dev<\/span>\/{<\/span>null<\/span>,<\/span>zero<\/span>,<\/span>stdin<\/span>,<\/span>stdout<\/span>,<\/span>stderr<\/span>,<\/span>random<\/span>,<\/span>tty<\/span>}<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
      \"\"<\/a><\/figure>\n\n\n\n

      <\/p>\n\n\n\n

      \u5217\u51fa\u6240\u9700\u6587\u4ef6<\/em><\/p>\n\n\n\n

      3\u3001 \u73b0\u5728\uff0c\u4f7f\u7528 mknod<\/code> \u547d\u4ee4\u521b\u5efa \/dev<\/code> \u4e0b\u7684\u6587\u4ef6\u3002\u5728\u4e0b\u9762\u7684\u547d\u4ee4\u4e2d\uff0c-m<\/code> \u6807\u5fd7\u7528\u6765\u6307\u5b9a\u6587\u4ef6\u6743\u9650\u4f4d\uff0cc<\/code> \u610f\u601d\u662f\u5b57\u7b26\u6587\u4ef6\uff0c\u4e24\u4e2a\u6570\u5b57\u5206\u522b\u662f\u6587\u4ef6\u6307\u5411\u7684\u4e3b\u8981\u53f7\u548c\u6b21\u8981\u53f7\u3002<\/p>\n\n\n\n

        \n
      1. #<\/span> mkdir<\/span> -<\/span>p <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>dev<\/span>\/<\/span> <\/code><\/li>\n\n\n\n
      2. #<\/span> cd<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>dev<\/span>\/<\/span><\/code><\/li>\n\n\n\n
      3. #<\/span> mknod<\/span> -<\/span>m <\/span>666<\/span> null<\/span> c <\/span>1<\/span> 3<\/span><\/code><\/li>\n\n\n\n
      4. #<\/span> mknod<\/span> -<\/span>m <\/span>666<\/span> tty<\/span> c <\/span>5<\/span> 0<\/span><\/code><\/li>\n\n\n\n
      5. #<\/span> mknod<\/span> -<\/span>m <\/span>666<\/span> zero c <\/span>1<\/span> 5<\/span><\/code><\/li>\n\n\n\n
      6. #<\/span> mknod<\/span> -<\/span>m <\/span>666<\/span> random c <\/span>1<\/span> 8<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
        \"\"<\/a><\/figure>\n\n\n\n

        <\/p>\n\n\n\n

        \u521b\u5efa \/dev \u548c\u6240\u9700\u6587\u4ef6<\/em><\/p>\n\n\n\n

        4\u3001 \u5728\u6b64\u4e4b\u540e\uff0c\u5728 chroot \u76d1\u72f1\u4e2d\u8bbe\u7f6e\u5408\u9002\u7684\u6743\u9650\u3002\u6ce8\u610f chroot \u76d1\u72f1\u548c\u5b83\u7684\u5b50\u76ee\u5f55\u4ee5\u53ca\u5b50\u6587\u4ef6\u5fc5\u987b\u88ab root<\/code> \u7528\u6237\u6240\u6709\uff0c\u5e76\u4e14\u5bf9\u666e\u901a\u7528\u6237\u6216\u7528\u6237\u7ec4\u4e0d\u53ef\u5199\uff1a<\/p>\n\n\n\n

          \n
        1. #<\/span> chown<\/span> root<\/span>:<\/span>root <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span><\/code><\/li>\n\n\n\n
        2. #<\/span> chmod<\/span> 0755<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span><\/code><\/li>\n\n\n\n
        3. #<\/span> ls<\/span> -<\/span>ld<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
          \"\"<\/a><\/figure>\n\n\n\n

          <\/p>\n\n\n\n

          \u8bbe\u7f6e\u76ee\u5f55\u6743\u9650<\/em><\/p>\n\n\n\n

          \u6b65\u9aa4 2\uff1a\u4e3a SSH chroot \u76d1\u72f1\u8bbe\u7f6e\u4ea4\u4e92\u5f0f shell<\/h3>\n\n\n\n

          5\u3001 \u9996\u5148\uff0c\u521b\u5efa bin<\/code> \u76ee\u5f55\u5e76\u590d\u5236 \/bin\/bash<\/code> \u5230 bin<\/code> \u4e2d\uff1a<\/p>\n\n\n\n

            \n
          1. #<\/span> mkdir<\/span> -<\/span>p <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>bin<\/span><\/code><\/li>\n\n\n\n
          2. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>bin<\/span>\/<\/span>bash<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>bin<\/span>\/<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
            \"\"<\/a><\/figure>\n\n\n\n

            <\/p>\n\n\n\n

            \u590d\u5236\u6587\u4ef6\u5230 bin \u76ee\u5f55\u4e2d<\/em><\/p>\n\n\n\n

            6\u3001 \u73b0\u5728\uff0c\u8bc6\u522b bash \u6240\u9700\u7684\u5171\u4eab\u5e93\uff0c\u5982\u4e0b\u6240\u793a\u590d\u5236\u5b83\u4eec\u5230 lib64<\/code> \u4e2d\uff1a<\/p>\n\n\n\n

              \n
            1. #<\/span> ldd<\/span> \/<\/span>bin<\/span>\/<\/span>bash<\/span><\/code><\/li>\n\n\n\n
            2. #<\/span> mkdir<\/span> -<\/span>p <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>lib64<\/span><\/code><\/li>\n\n\n\n
            3. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>lib64<\/span>\/{<\/span>libtinfo<\/span>.<\/span>so<\/span>.<\/span>5<\/span>,<\/span>libdl<\/span>.<\/span>so<\/span>.<\/span>2<\/span>,<\/span>libc<\/span>.<\/span>so<\/span>.<\/span>6<\/span>,<\/span>ld<\/span>-<\/span>linux<\/span>-<\/span>x86<\/span>-<\/span>64.so<\/span>.<\/span>2<\/span>}<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>lib64<\/span>\/<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
              \"\"<\/a><\/figure>\n\n\n\n

              <\/p>\n\n\n\n

              \u590d\u5236\u5171\u4eab\u5e93\u6587\u4ef6<\/em><\/p>\n\n\n\n

              \u6b65\u9aa4 3\uff1a\u521b\u5efa\u5e76\u914d\u7f6e SSH \u7528\u6237<\/h3>\n\n\n\n

              7\u3001 \u73b0\u5728\uff0c\u4f7f\u7528 useradd \u547d\u4ee4<\/a>\u521b\u5efa SSH \u7528\u6237\uff0c\u5e76\u8bbe\u7f6e\u5b89\u5168\u5bc6\u7801\uff1a<\/p>\n\n\n\n

                \n
              1. #<\/span> useradd<\/span> tecmint<\/span><\/code><\/li>\n\n\n\n
              2. #<\/span> passwd<\/span> tecmint<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

                8\u3001 \u521b\u5efa chroot \u76d1\u72f1\u901a\u7528\u914d\u7f6e\u76ee\u5f55 \/home\/test\/etc<\/code> \u5e76\u590d\u5236\u5df2\u66f4\u65b0\u7684\u8d26\u53f7\u6587\u4ef6\uff08\/etc\/passwd<\/code> \u548c \/etc\/group<\/code>\uff09\u5230\u8fd9\u4e2a\u76ee\u5f55\u4e2d\uff1a<\/p>\n\n\n\n

                  \n
                1. #<\/span> mkdir<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>etc<\/span><\/code><\/li>\n\n\n\n
                2. #<\/span> cp<\/span> -<\/span>vf <\/span>\/<\/span>etc<\/span>\/{<\/span>passwd<\/span>,<\/span>group<\/span>}<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>etc<\/span>\/<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                  \"\"<\/a><\/figure>\n\n\n\n

                  <\/p>\n\n\n\n

                  \u590d\u5236\u5bc6\u7801\u6587\u4ef6<\/em><\/p>\n\n\n\n

                  \u6ce8\u610f\uff1a\u6bcf\u6b21\u5411\u7cfb\u7edf\u6dfb\u52a0\u66f4\u591a SSH \u7528\u6237\u65f6\uff0c\u90fd\u9700\u8981\u5c06\u66f4\u65b0\u7684\u5e10\u6237\u6587\u4ef6\u590d\u5236\u5230 \/home\/test\/etc<\/code> \u76ee\u5f55\u4e2d\u3002<\/p>\n\n\n\n

                  \u6b65\u9aa4 4\uff1a\u914d\u7f6e SSH \u6765\u4f7f\u7528 chroot \u76d1\u72f1<\/h3>\n\n\n\n

                  9\u3001 \u73b0\u5728\u6253\u5f00 sshd_config<\/code> \u6587\u4ef6\u3002<\/p>\n\n\n\n

                    \n
                  1. #<\/span> vi<\/span> \/<\/span>etc<\/span>\/<\/span>ssh<\/span>\/<\/span>sshd_config<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

                    \u5728\u6b64\u6587\u4ef6\u4e2d\u6dfb\u52a0\u6216\u4fee\u6539\u4e0b\u9762\u8fd9\u4e9b\u884c\u3002<\/p>\n\n\n\n

                      \n
                    1. #<\/span> \u5b9a\u4e49\u8981\u4f7f\u7528<\/span> chroot<\/span> \u76d1\u72f1\u7684\u7528\u6237<\/span><\/code><\/li>\n\n\n\n
                    2. Match<\/span> User<\/span> tecmint<\/span><\/code><\/li>\n\n\n\n
                    3. #<\/span> \u6307\u5b9a<\/span> chroot<\/span> \u76d1\u72f1<\/span><\/code><\/li>\n\n\n\n
                    4. ChrootDirectory<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                      \"\"<\/a><\/figure>\n\n\n\n

                      <\/p>\n\n\n\n

                      \u914d\u7f6e SSH chroot \u76d1\u72f1<\/em><\/p>\n\n\n\n

                      \u4fdd\u5b58\u6587\u4ef6\u5e76\u9000\u51fa\uff0c\u91cd\u542f sshd \u670d\u52a1\uff1a<\/p>\n\n\n\n

                        \n
                      1. #<\/span> systemctl<\/span> restart <\/span>sshd<\/span><\/code><\/li>\n\n\n\n
                      2. \u6216\u8005<\/span><\/code><\/li>\n\n\n\n
                      3. #<\/span> service <\/span>sshd<\/span> restart<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

                        \u6b65\u9aa4 5\uff1a\u6d4b\u8bd5 SSH \u7684 chroot \u76d1\u72f1<\/h3>\n\n\n\n

                        10\u3001 \u8fd9\u6b21\uff0c\u6d4b\u8bd5 chroot \u76d1\u72f1\u7684\u8bbe\u7f6e\u662f\u5426\u5982\u5e0c\u671b\u7684\u90a3\u6837\u6210\u529f\u4e86\uff1a<\/p>\n\n\n\n

                          \n
                        1. #<\/span> ssh<\/span> tecmint@192<\/span>.<\/span>168.0<\/span>.<\/span>10<\/span><\/code><\/li>\n\n\n\n
                        2. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ <\/span>ls<\/span><\/code><\/li>\n\n\n\n
                        3. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ <\/span>date<\/span><\/code><\/li>\n\n\n\n
                        4. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ <\/span>uname<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                          \"\"<\/a><\/figure>\n\n\n\n

                          <\/p>\n\n\n\n

                          \u6d4b\u8bd5 SSH \u7528\u6237 chroot \u76d1\u72f1<\/em><\/p>\n\n\n\n

                          \u4ece\u4e0a\u9762\u7684\u622a\u56fe\u4e0a\u6765\u770b\uff0c\u6211\u4eec\u53ef\u4ee5\u770b\u5230 SSH \u7528\u6237\u88ab\u9501\u5b9a\u5728\u4e86 chroot \u76d1\u72f1\u4e2d\uff0c\u5e76\u4e14\u4e0d\u80fd\u4f7f\u7528\u4efb\u4f55\u5916\u90e8\u547d\u4ee4\u5982\uff08ls<\/code>\u3001date<\/code>\u3001uname<\/code> \u7b49\u7b49\uff09\u3002<\/p>\n\n\n\n

                          \u7528\u6237\u53ea\u53ef\u4ee5\u6267\u884c bash<\/code> \u4ee5\u53ca\u5b83\u5185\u7f6e\u7684\u547d\u4ee4\uff08\u6bd4\u5982\uff1apwd<\/code>\u3001history<\/code>\u3001echo<\/code> \u7b49\u7b49\uff09\uff1a<\/p>\n\n\n\n

                            \n
                          1. #<\/span> ssh<\/span> tecmint@192<\/span>.<\/span>168.0<\/span>.<\/span>10<\/span><\/code><\/li>\n\n\n\n
                          2. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ <\/span>pwd<\/span><\/code><\/li>\n\n\n\n
                          3. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ <\/span>echo<\/span> \"Tecmint - Fastest Growing Linux Site\"<\/span><\/code><\/li>\n\n\n\n
                          4. -<\/span>bash<\/span>-<\/span>4.1<\/span>$ history<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                            \"\"<\/a><\/figure>\n\n\n\n

                            <\/p>\n\n\n\n

                            SSH \u5185\u7f6e\u547d\u4ee4<\/em><\/p>\n\n\n\n

                            \u6b65\u9aa4 6\uff1a \u521b\u5efa\u7528\u6237\u7684\u4e3b\u76ee\u5f55\u5e76\u6dfb\u52a0 Linux \u547d\u4ee4<\/h3>\n\n\n\n

                            11\u3001 \u4ece\u524d\u9762\u7684\u6b65\u9aa4\u4e2d\uff0c\u6211\u4eec\u53ef\u4ee5\u770b\u5230\u7528\u6237\u88ab\u9501\u5b9a\u5728\u4e86 root \u76ee\u5f55\uff0c\u6211\u4eec\u53ef\u4ee5\u4e3a SSH \u7528\u6237\u521b\u5efa\u4e00\u4e2a\u4e3b\u76ee\u5f55\uff08\u4ee5\u53ca\u4e3a\u6240\u6709\u5c06\u6765\u7684\u7528\u6237\u8fd9\u4e48\u505a\uff09\uff1a<\/p>\n\n\n\n

                              \n
                            1. #<\/span> mkdir<\/span> -<\/span>p <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>home<\/span>\/<\/span>tecmint<\/span><\/code><\/li>\n\n\n\n
                            2. #<\/span> chown<\/span> -<\/span>R tecmint<\/span>:<\/span>tecmint <\/span>\/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>home<\/span>\/<\/span>tecmint<\/span><\/code><\/li>\n\n\n\n
                            3. #<\/span> chmod<\/span> -<\/span>R <\/span>0700<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>home<\/span>\/<\/span>tecmint<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                              \"\"<\/a><\/figure>\n\n\n\n

                              <\/p>\n\n\n\n

                              \u521b\u5efa SSH \u7528\u6237\u4e3b\u76ee\u5f55<\/em><\/p>\n\n\n\n

                              12\u3001 \u63a5\u4e0b\u6765\uff0c\u5728 bin<\/code> \u76ee\u5f55\u4e2d\u5b89\u88c5\u51e0\u4e2a\u7528\u6237\u547d\u4ee4\uff0c\u5982 ls<\/code>\u3001date<\/code>\u3001mkdir<\/code>\uff1a<\/p>\n\n\n\n

                                \n
                              1. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>bin<\/span>\/<\/span>ls<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>bin<\/span>\/<\/span><\/code><\/li>\n\n\n\n
                              2. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>bin<\/span>\/<\/span>date<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>bin<\/span>\/<\/span><\/code><\/li>\n\n\n\n
                              3. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>bin<\/span>\/<\/span>mkdir<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>bin<\/span>\/<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                                \"\"<\/a><\/figure>\n\n\n\n

                                <\/p>\n\n\n\n

                                \u5411 SSH \u7528\u6237\u6dfb\u52a0\u547d\u4ee4<\/em><\/p>\n\n\n\n

                                13\u3001 \u63a5\u4e0b\u6765\uff0c\u68c0\u67e5\u4e0a\u9762\u547d\u4ee4\u7684\u5171\u4eab\u5e93\u5e76\u5c06\u5b83\u4eec\u79fb\u5230 chroot \u76d1\u72f1\u7684\u5e93\u76ee\u5f55\u4e2d\uff1a<\/p>\n\n\n\n

                                  \n
                                1. #<\/span> ldd<\/span> \/<\/span>bin<\/span>\/<\/span>ls<\/span><\/code><\/li>\n\n\n\n
                                2. #<\/span> cp<\/span> -<\/span>v <\/span>\/<\/span>lib64<\/span>\/{<\/span>libselinux<\/span>.<\/span>so<\/span>.<\/span>1<\/span>,<\/span>libcap<\/span>.<\/span>so<\/span>.<\/span>2<\/span>,<\/span>libacl<\/span>.<\/span>so<\/span>.<\/span>1<\/span>,<\/span>libc<\/span>.<\/span>so<\/span>.<\/span>6<\/span>,<\/span>libpcre<\/span>.<\/span>so<\/span>.<\/span>1<\/span>,<\/span>libdl<\/span>.<\/span>so<\/span>.<\/span>2<\/span>,<\/span>ld<\/span>-<\/span>linux<\/span>-<\/span>x86<\/span>-<\/span>64.so<\/span>.<\/span>2<\/span>,<\/span>libattr<\/span>.<\/span>so<\/span>.<\/span>1<\/span>,<\/span>libpthread<\/span>.<\/span>so<\/span>.<\/span>0<\/span>}<\/span> \/<\/span>home<\/span>\/<\/span>test<\/span>\/<\/span>lib64<\/span>\/<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                                  \"\"<\/a><\/figure>\n\n\n\n

                                  <\/p>\n\n\n\n

                                  \u590d\u5236\u5171\u4eab\u5e93<\/em><\/p>\n\n\n\n

                                  \u6b65\u9aa4 7\uff1a\u6d4b\u8bd5 sftp \u7684 \u7528 chroot \u76d1\u72f1<\/h3>\n\n\n\n

                                  14\u3001 \u6700\u540e\u7528 sftp \u505a\u4e00\u4e2a\u6d4b\u8bd5\uff1b\u6d4b\u8bd5\u4f60\u5148\u524d\u5b89\u88c5\u7684\u547d\u4ee4\u662f\u5426\u53ef\u7528\u3002<\/p>\n\n\n\n

                                  \u5728 \/etc\/ssh\/sshd_config<\/code> \u4e2d\u6dfb\u52a0\u4e0b\u9762\u7684\u884c\uff1a<\/p>\n\n\n\n

                                    \n
                                  1. #<\/span> \u542f\u7528<\/span> sftp<\/span> \u7684<\/span> chroot<\/span> \u76d1\u72f1<\/span> <\/code><\/li>\n\n\n\n
                                  2. ForceCommand<\/span> internal<\/span>-<\/span>sftp<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

                                    \u4fdd\u5b58\u5e76\u9000\u51fa\u6587\u4ef6\u3002\u63a5\u4e0b\u6765\u91cd\u542f sshd \u670d\u52a1\uff1a<\/p>\n\n\n\n

                                      \n
                                    1. #<\/span> systemctl<\/span> restart <\/span>sshd<\/span><\/code><\/li>\n\n\n\n
                                    2. \u6216\u8005<\/span><\/code><\/li>\n\n\n\n
                                    3. #<\/span> service <\/span>sshd<\/span> restart<\/span><\/code><\/li>\n<\/ol>\n\n\n\n

                                      15\u3001 \u73b0\u5728\u4f7f\u7528 ssh \u6d4b\u8bd5\uff0c\u4f60\u4f1a\u5f97\u5230\u4e0b\u9762\u7684\u9519\u8bef\uff1a<\/p>\n\n\n\n

                                        \n
                                      1. #<\/span> ssh<\/span> tecmint@192<\/span>.<\/span>168.0<\/span>.<\/span>10<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                                        \"\"<\/a><\/figure>\n\n\n\n

                                        <\/p>\n\n\n\n

                                        \u6d4b\u8bd5 SSH Chroot \u76d1\u72f1<\/em><\/p>\n\n\n\n

                                        \u8bd5\u4e0b\u4f7f\u7528 sftp\uff1a<\/p>\n\n\n\n

                                          \n
                                        1. #<\/span> sftp<\/span> tecmint@192<\/span>.<\/span>168.0<\/span>.<\/span>10<\/span><\/code><\/li>\n<\/ol>\n\n\n\n
                                          \"\"<\/a><\/figure>\n\n\n\n

                                          <\/p>\n\n\n\n

                                          \u6d4b\u8bd5 sFTP SSH \u7528\u6237<\/em><\/p>\n\n\n\n

                                          \u5efa\u8bae\u9605\u8bfb\uff1a<\/strong> \u4f7f\u7528 chroot \u76d1\u72f1\u5c06 sftp \u7528\u6237\u9650\u5236\u5728\u4e3b\u76ee\u5f55\u4e2d<\/a>\u3002<\/p>\n\n\n\n

                                          \u5c31\u662f\u8fd9\u6837\u4e86\uff01\u5728\u6587\u672c\u4e2d\uff0c\u6211\u4eec\u5411\u4f60\u5c55\u793a\u4e86\u5982\u4f55\u5728 Linux \u4e2d\u9650\u5236 ssh \u7528\u6237\u5230\u6307\u5b9a\u7684\u76ee\u5f55\u4e2d\uff08 chroot \u76d1\u72f1\uff09\u3002\u8bf7\u5728\u8bc4\u8bba\u680f\u4e2d\u7ed9\u6211\u4eec\u63d0\u4f9b\u4f60\u7684\u60f3\u6cd5\u3002<\/p>\n\n\n\n

                                           <\/p>\n\n\n\n

                                          \u539f\u6587\u94fe\u63a5\uff1ahttps:\/\/linux.cn\/article-8313-1.html?utm_source=index&utm_medium=more<\/p>\n","protected":false},"excerpt":{"rendered":"

                                          \u5c06 SSH \u7528\u6237\u4f1a\u8bdd\u9650\u5236\u8bbf\u95ee\u5230\u7279\u5b9a\u7684\u76ee\u5f55\u5185\uff0c\u7279\u522b\u662f\u5728 web \u670d\u52a1\u5668\u4e0a\uff0c\u8fd9\u6837\u505a\u6709\u591a\u4e2a\u539f\u56e0\uff0c\u4f46\u6700\u663e\u800c\u6613\u89c1\u7684\u662f\u4e3a\u4e86 … \u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[49,5],"tags":[597,512],"class_list":["post-1980","post","type-post","status-publish","format-standard","hentry","category-linux","category-jishu","tag-chroot","tag-linuxssh"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/1980","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/comments?post=1980"}],"version-history":[{"count":3,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/1980\/revisions"}],"predecessor-version":[{"id":9379,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/1980\/revisions\/9379"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/media?parent=1980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/categories?post=1980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/tags?post=1980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}