怎样设置才能够让用户不能telnet 只能ftp

victorxu79

怎样设置才能够让用户不能telnet 只能ftp

陈非非飞

#vi /etc/passwd
去掉你要限制的用户的shell

如:

xxx:.............:/bin/bash
改为:
xxx:.............:/bin/failure


:em11:

水平低

，你可以VI  /var/adm/inetd.sec
来控制

水平低

# @(#)B.11.11_LRinetd.sec $Revision: 1.10.214.1 $ $Date: 96/10/08 13:20:06 $
#
#
# The lines in the file contain a service name, permission field and
# the Internet addresses or names of the hosts and/or networks
# allowed to use that service in the local machine.
# The form for each entry in this file is:
#
# <service name>;   <allow/deny>;  <host/network addresses, host/network names>;
#
# For example:
#
# login         allow   10.3-5 192.34.56.5 ahost anetwork
#
# The above entry allows the following hosts to attempt to access your system
# using rlogin:
#               hosts in subnets 3 through 5 in network 10,
#               the host with Internet Address of 192.34.56.5,
#               the host by the name of \"ahost\",
#               all the hosts in the network \"anetwork\"
#
# mountd      deny    192.23.4.3
#
# The mountd entry  denies host  192.23.4.3  access to the NFS  rpc.mountd
# server.
#
# Hosts and network names must be official names, not aliases.
# See the inetd.sec(4) manual page for more information.
telnet  allow   hostname  10.0.xxx

liuzq

设置inetd.sec好像不能限制某个用户吧，好像都是针对主机和ip的
# <service name>; <allow/deny>; <host/network addresses, host/network names>;

在/usr/newconfig/etc/ftpd目录下面有几个配置文件你研究一下吧，cp到/etc/ftpd下应该～（只是猜测，今天没时间实验了～：》）

victorxu79

我搞定了,先建一个/etc/shells文件,将常用的shell和/usr/bin/false or /usr/bin/true 放进去.
然后
usermod -s /usr/bin/false xxx就ok了!