mirror of
https://github.com/caiwx86/small-packages.git
synced 2026-09-14 04:14:40 +08:00
update 2026-07-15 01:08:36
This commit is contained in:
action
Executable
+14
@@ -0,0 +1,14 @@
|
||||
#!/bin/sh /etc/rc.common
|
||||
# Copyright (C) 2006-2011 OpenWrt.org
|
||||
|
||||
START=50
|
||||
|
||||
start() {
|
||||
/usr/sbin/vsftpd_prepare
|
||||
service_start /usr/sbin/vsftpd_wrapper ipv4
|
||||
service_start /usr/sbin/vsftpd_wrapper ipv6
|
||||
}
|
||||
|
||||
stop() {
|
||||
service_stop /usr/sbin/vsftpd
|
||||
}
|
||||
@@ -0,0 +1,30 @@
|
||||
background=YES
|
||||
listen=YES
|
||||
anonymous_enable=NO
|
||||
local_enable=YES
|
||||
write_enable=YES
|
||||
local_umask=022
|
||||
check_shell=NO
|
||||
#dirmessage_enable=YES
|
||||
#ftpd_banner=Welcome to blah FTP service.
|
||||
session_support=NO
|
||||
#syslog_enable=YES
|
||||
#userlist_enable=YES
|
||||
#userlist_deny=NO
|
||||
#userlist_file=/etc/vsftpd.users
|
||||
#xferlog_enable=YES
|
||||
#xferlog_file=/var/log/vsftpd.log
|
||||
#xferlog_std_format=YES
|
||||
###
|
||||
### TLS/SSL options
|
||||
### example key generation: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/config/vsftpd_privkey.pem -out /etc/config/vsftpd_cert.pem -subj /C="DE"/ST="Saxony"/L="Leipzig"/CN="OpenWrt"
|
||||
#ssl_enable=YES
|
||||
#allow_anon_ssl=NO
|
||||
#force_local_data_ssl=NO
|
||||
#force_local_logins_ssl=NO
|
||||
#ssl_tlsv1=YES
|
||||
#ssl_sslv2=NO
|
||||
#ssl_sslv3=NO
|
||||
#rsa_cert_file=/etc/config/vsftpd_cert.pem
|
||||
#rsa_private_key_file=/etc/config/vsftpd_privkey.pem
|
||||
|
||||
Executable
+13
@@ -0,0 +1,13 @@
|
||||
#!/bin/sh /etc/rc.common
|
||||
# Copyright (C) 2006-2011 OpenWrt.org
|
||||
|
||||
START=50
|
||||
|
||||
start() {
|
||||
mkdir -m 0755 -p /var/run/vsftpd
|
||||
service_start /usr/sbin/vsftpd
|
||||
}
|
||||
|
||||
stop() {
|
||||
service_stop /usr/sbin/vsftpd
|
||||
}
|
||||
@@ -0,0 +1,50 @@
|
||||
|
||||
config listen 'listen'
|
||||
option enable4 '1'
|
||||
option ipv4 '0.0.0.0'
|
||||
option enable6 '0'
|
||||
option ipv6 '::1'
|
||||
option port '21'
|
||||
option dataport '20'
|
||||
|
||||
config local 'local'
|
||||
option enabled '1'
|
||||
|
||||
config global 'global'
|
||||
option write '1'
|
||||
option download '1'
|
||||
option dotfile '0'
|
||||
option umask '022'
|
||||
option dirlist '1'
|
||||
option dirmsgfile '.message'
|
||||
|
||||
config connection 'connection'
|
||||
option portmode '1'
|
||||
option pasvmode '1'
|
||||
option ascii 'both'
|
||||
option idletimeout '1800'
|
||||
option conntimeout '120'
|
||||
option dataconntimeout '120'
|
||||
option maxclient '0'
|
||||
option maxperip '0'
|
||||
option maxrate '0'
|
||||
option maxretry '3'
|
||||
|
||||
config anonymous 'anonymous'
|
||||
option enabled '0'
|
||||
option username 'ftp'
|
||||
option root '/home/ftp'
|
||||
option umask '022'
|
||||
option writemkdir '0'
|
||||
option upload '0'
|
||||
option others '0'
|
||||
option maxrate '0'
|
||||
|
||||
config log 'log'
|
||||
option syslog '0'
|
||||
option xreflog '1'
|
||||
option file '/var/log/vsftpd.log'
|
||||
|
||||
config vuser 'vuser'
|
||||
option enabled '0'
|
||||
option username 'ftp'
|
||||
Executable
+258
@@ -0,0 +1,258 @@
|
||||
#!/bin/sh
|
||||
# Copyright (C) 2005-2016 Weijie Gao <hackpascal@gmail.com>
|
||||
|
||||
. $IPKG_INSTROOT/lib/functions.sh
|
||||
|
||||
output_field()
|
||||
{
|
||||
local UCI_SECTION=$1
|
||||
local KEY=$2
|
||||
local INIFIELD=$3
|
||||
local DEFVALUE=$4
|
||||
local value
|
||||
|
||||
if [ -z "$INIFIELD" ]; then INIFIELD=$KEY; fi
|
||||
|
||||
config_get value "$UCI_SECTION" "$KEY"
|
||||
if [ -z "$value" ]; then value=$DEFVALUE; fi
|
||||
|
||||
echo "$INIFIELD=$value" >> $CONF
|
||||
}
|
||||
|
||||
output_bool()
|
||||
{
|
||||
local UCI_SECTION=$1
|
||||
local KEY=$2
|
||||
local INIFIELD=$3
|
||||
local DEFVALUE=$4
|
||||
local value
|
||||
|
||||
if [ -z "$INIFIELD" ]; then INIFIELD=$KEY; fi
|
||||
|
||||
config_get value "$UCI_SECTION" "$KEY"
|
||||
if [ -z "$value" ]; then value=$DEFVALUE; fi
|
||||
if [ x"$value" != x0 ] && [ x"$value" != x1 ]; then value=0; fi
|
||||
|
||||
if [ "$value" == 0 ]; then
|
||||
value=NO
|
||||
else
|
||||
value=YES
|
||||
fi
|
||||
|
||||
echo "$INIFIELD=$value" >> $CONF
|
||||
}
|
||||
|
||||
output_const()
|
||||
{
|
||||
local INIFIELD=$1
|
||||
local value=$2
|
||||
|
||||
echo "$INIFIELD=$value" >> $CONF
|
||||
}
|
||||
|
||||
get_value()
|
||||
{
|
||||
local UCI_SECTION=$1
|
||||
local KEY=$2
|
||||
local value
|
||||
|
||||
config_get value "$UCI_SECTION" "$KEY"
|
||||
|
||||
echo $value
|
||||
}
|
||||
|
||||
vusers_iterate()
|
||||
{
|
||||
local config=$1
|
||||
local name
|
||||
local password
|
||||
local owner
|
||||
local home
|
||||
local _umask
|
||||
local maxrate
|
||||
local write_enable
|
||||
local upload_enable
|
||||
local mkdir_enable
|
||||
local others_enable
|
||||
|
||||
config_get name "$config" username
|
||||
config_get password "$config" password
|
||||
config_get home "$config" home
|
||||
config_get _umask "$config" "umask"
|
||||
config_get maxrate "$config" maxrate
|
||||
config_get write_enable "$config" writemkdir
|
||||
config_get upload_enable "$config" upload
|
||||
config_get others_enable "$config" others
|
||||
|
||||
config_get owner "vuser" username
|
||||
|
||||
rm -f $VUSER_CONF_DIR/$name
|
||||
touch $VUSER_CONF_DIR/$name
|
||||
|
||||
if [ -z $home ]; then home=$CHROOT_DIR; fi
|
||||
|
||||
echo "local_root=$home" >> $VUSER_CONF_DIR/$name
|
||||
|
||||
if [ x$write_enable = x1 ]; then write_enable=YES; else write_enable=NO; fi
|
||||
if [ x$upload_enable = x1 ]; then upload_enable=YES; else upload_enable=NO; fi
|
||||
if [ x$others_enable = x1 ]; then others_enable=YES; else others_enable=NO; fi
|
||||
if [ -z $_umask ]; then _umask=022; fi
|
||||
if [ -z $maxrate ]; then maxrate=0; fi
|
||||
|
||||
echo "anon_world_readable_only=NO" >> $VUSER_CONF_DIR/$name
|
||||
echo "anon_mkdir_write_enable=$write_enable" >> $VUSER_CONF_DIR/$name
|
||||
echo "write_enable=$write_enable" >> $VUSER_CONF_DIR/$name
|
||||
echo "anon_upload_enable=$upload_enable" >> $VUSER_CONF_DIR/$name
|
||||
echo "anon_other_write_enable=$others_enable" >> $VUSER_CONF_DIR/$name
|
||||
echo "anon_umask=$_umask" >> $VUSER_CONF_DIR/$name
|
||||
echo "anon_max_rate=$maxrate" >> $VUSER_CONF_DIR/$name
|
||||
|
||||
if ! [ -d "$home" ]; then
|
||||
mkdir -p $home
|
||||
chown $owner:$owner $home
|
||||
chmod -R a+w $home
|
||||
fi
|
||||
}
|
||||
|
||||
VAR=/var/run/vsftpd
|
||||
CONF=$VAR/vsftpd.conf
|
||||
VUSER_DB=$VAR/vusers
|
||||
VUSER_CONF_DIR=$VAR/users
|
||||
CHROOT_DIR=$VAR/empty
|
||||
|
||||
rm -f $CONF
|
||||
rm -rf $VUSER_CONF_DIR $CHROOT_DIR
|
||||
|
||||
mkdir -m 0755 -p $VAR
|
||||
mkdir -p $VUSER_CONF_DIR
|
||||
mkdir -p $CHROOT_DIR
|
||||
|
||||
config_load vsftpd
|
||||
|
||||
# listen
|
||||
output_const "background" YES
|
||||
output_field listen port "listen_port" 21
|
||||
output_field listen dataport "ftp_data_port" 20
|
||||
output_field listen pasv_min_port "pasv_min_port" 50000
|
||||
output_field listen pasv_max_port "pasv_max_port" 51000
|
||||
|
||||
# global
|
||||
output_bool global 'write' "write_enable" 1
|
||||
output_bool global download "download_enable" 1
|
||||
output_bool global dirlist "dirlist_enable" 1
|
||||
output_bool global lsrecurse "ls_recurse_enable"
|
||||
output_bool global dotfile "force_dot_files"
|
||||
output_field global 'umask' "local_umask" 022
|
||||
|
||||
ftpd_banner=`get_value global banner`
|
||||
if ! [ -z $ftpd_banner ]; then
|
||||
output_const "ftpd_banner" $ftpd_banner
|
||||
fi
|
||||
|
||||
output_bool global dirmessage "dirmessage_enable"
|
||||
output_field global dirmsgfile "message_file" ".message"
|
||||
|
||||
# connection
|
||||
output_bool connection portmode "port_enable" 1
|
||||
output_bool connection pasvmode "pasv_enable" 1
|
||||
|
||||
ascii_download_enable=NO
|
||||
ascii_upload_enable=NO
|
||||
case `get_value connection ascii` in
|
||||
download)
|
||||
ascii_download_enable=YES
|
||||
;;
|
||||
upload)
|
||||
ascii_upload_enable=YES
|
||||
;;
|
||||
both)
|
||||
ascii_download_enable=YES
|
||||
ascii_upload_enable=YES
|
||||
esac
|
||||
output_const "ascii_download_enable" $ascii_download_enable
|
||||
output_const "ascii_upload_enable" $ascii_upload_enable
|
||||
|
||||
output_field connection idletimeout "idle_session_timeout" 1800
|
||||
output_field connection conntimeout "connect_timeout" 120
|
||||
output_field connection dataconntimeout "data_connection_timeout" 120
|
||||
output_field connection maxclient "max_clients" 0
|
||||
output_field connection maxperip "max_per_ip" 0
|
||||
output_field connection maxrate "local_max_rate" 0
|
||||
|
||||
max_login_fails=`get_value connection maxretry`
|
||||
if [ -z $max_login_fails ] || [ $max_login_fails -lt 1 ]; then max_login_fails=3; fi
|
||||
output_const "max_login_fails" $max_login_fails
|
||||
|
||||
# anonymous
|
||||
ftp_username=`get_value anonymous ftp_username`
|
||||
if [ -z $ftp_username ]; then ftp_username="ftp"; fi
|
||||
output_const "ftp_username" $ftp_username
|
||||
|
||||
mkdir -m 0755 -p /home/$ftp_username
|
||||
chown $ftp_username:$ftp_username /home/$ftp_username
|
||||
|
||||
output_const "anon_world_readable_only" NO
|
||||
|
||||
anon_enable=`get_value anonymous enabled`
|
||||
if [ x$anon_enable = x1 ]; then
|
||||
anon_root=`get_value anonymous root`
|
||||
if [ -z $anon_root ]; then anon_root="/home/ftp"; fi
|
||||
|
||||
output_const "anonymous_enable" YES
|
||||
output_const "no_anon_password" YES
|
||||
output_const "anon_root" $anon_root
|
||||
output_field anonymous 'umask' "anon_umask" 022
|
||||
output_field anonymous maxrate "anon_max_rate" 0
|
||||
output_bool anonymous writemkdir "anon_mkdir_write_enable" 0
|
||||
output_bool anonymous upload "anon_upload_enable" 0
|
||||
output_bool anonymous others "anon_other_write_enable" 0
|
||||
|
||||
mkdir -p $anon_root
|
||||
chown -R $ftp_username:$ftp_username $anon_root
|
||||
else
|
||||
output_const "anonymous_enable" NO
|
||||
fi
|
||||
|
||||
# log
|
||||
output_bool log syslog "syslog_enable" 0
|
||||
output_bool log xreflog "xferlog_enable" 0
|
||||
output_field log 'file' "vsftpd_log_file" 0
|
||||
|
||||
# users
|
||||
vuser_enabled=0
|
||||
if [ x`get_value vuser enabled` = x1 ]; then
|
||||
vuser_enabled=1
|
||||
|
||||
output_const "guest_enable" YES
|
||||
output_field vuser username "guest_username" ftp
|
||||
|
||||
output_const "uci_config_name" vsftpd
|
||||
output_const "user_config_dir" "/var/run/vsftpd/users"
|
||||
|
||||
config_foreach vusers_iterate user
|
||||
fi
|
||||
|
||||
# local user
|
||||
output_const "allow_writeable_chroot" YES
|
||||
output_const "secure_chroot_dir" $CHROOT_DIR
|
||||
|
||||
local_root=$(get_value 'local' root)
|
||||
if ! [ -z $local_root ]; then
|
||||
output_const "local_root" $local_root
|
||||
fi
|
||||
|
||||
local_enable=`get_value 'local' enabled`
|
||||
if [ x$local_enable = x1 ]; then
|
||||
output_const "local_enable" YES
|
||||
else
|
||||
if [ $vuser_enabled = 1 ]; then
|
||||
output_const "local_enable" YES
|
||||
else
|
||||
output_const "local_enable" NO
|
||||
fi
|
||||
fi
|
||||
|
||||
output_const "seccomp_sandbox" NO
|
||||
output_const "use_localtime" YES
|
||||
|
||||
exit 0
|
||||
Executable
+49
@@ -0,0 +1,49 @@
|
||||
#!/bin/sh
|
||||
# Copyright (C) 2005-2016 Weijie Gao <hackpascal@gmail.com>
|
||||
|
||||
. $IPKG_INSTROOT/lib/functions.sh
|
||||
|
||||
VAR=/var/run/vsftpd
|
||||
CONF=$VAR/vsftpd.conf
|
||||
listen_addr=
|
||||
enabled=
|
||||
param=""
|
||||
listen4=
|
||||
listen6=
|
||||
protocol=$1
|
||||
|
||||
config_load vsftpd
|
||||
|
||||
if ! [ -f $CONF ]; then
|
||||
echo "/usr/bin/vsftpd_prepare must be executed before this script"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case $protocol in
|
||||
ipv6)
|
||||
config_get enabled listen enable6
|
||||
|
||||
if [ x$enabled != x1 ]; then exit 0; fi
|
||||
|
||||
config_get listen_addr listen ipv6
|
||||
param="6"
|
||||
listen4="-olisten=NO"
|
||||
listen6="-olisten_ipv6=YES"
|
||||
|
||||
if [ -z $listen_addr ]; then listen_addr="::"; fi
|
||||
;;
|
||||
*)
|
||||
config_get enabled listen enable4
|
||||
|
||||
if [ x$enabled != x1 ]; then exit 0; fi
|
||||
|
||||
config_get listen_addr listen ipv4
|
||||
listen4="-olisten=YES"
|
||||
listen6="-olisten_ipv6=NO"
|
||||
|
||||
if [ -z $listen_addr ]; then listen_addr="0.0.0.0"; fi
|
||||
esac
|
||||
|
||||
exec /usr/sbin/vsftpd "-olisten_address${param}=${listen_addr}" ${listen4} ${listen6} $CONF
|
||||
|
||||
exit 1
|
||||
Reference in New Issue
Block a user