阅读量:3
限制SSH用户的访问权限是提高系统安全性的重要措施。以下是一些常见的方法来限制SSH用户的访问权限：
1. 使用 sshd_config 文件
编辑 /etc/ssh/sshd_config 文件，可以全局或针对特定用户进行配置。
全局配置
-
限制登录用户：
AllowUsers user1 user2 user3这将只允许
user1,user2, 和user3用户通过SSH登录。 -
限制登录组：
AllowGroups group1 group2这将只允许属于
group1和group2组的用户通过SSH登录。 -
禁止root登录：
PermitRootLogin no -
限制登录时间：
Match User user1 ForceCommand internal-sftp PasswordAuthentication no PermitRootLogin no AllowTcpForwarding no X11Forwarding no PermitTTY no AllowAgentForwarding no PermitOpen any AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForwarding yes AllowAgentForwarding yes AllowX11Forwarding yes PermitTTY yes AllowStreamLocalCommand yes AllowTcpForward
以上就是关于“如何限制SSH用户的访问权限”的相关介绍，筋斗云是国内较早的云主机应用的服务商，拥有10余年行业经验，提供丰富的云服务器、租用服务器等相关产品服务。云服务器资源弹性伸缩，主机vCPU、内存性能强悍、超高I/O速度、故障秒级恢复；电子化备案，提交快速，专业团队7×24小时服务支持！
简单好用、高性价比云服务器租用链接：https://www.jindouyun.cn/product/cvm