groupadd sftp

useradd -g sftp -s /bin/false andy

passwd andy

mkdir -p /data/sftp/andy

usermod -d /data/sftp/andy andy

vi /etc/ssh/sshd_config

# Subsystem      sftp    /usr/libexec/openssh/sftp-server

Subsystem       sftp    internal-sftp
Match Group sftp
ChrootDirectory /data/sftp/%u
ForceCommand    internal-sftp
AllowTcpForwarding no
X11Forwarding no

chown root:sftp /data/sftp/andy
chmod 755 /data/sftp/andy

mkdir /data/sftp/andy/upload
chown andy:sftp /data/sftp/andy/upload  
chmod 755 /data/sftp/andy/upload

vi /etc/selinux/config

#SELINUX=enforcing
#改为
#SELINUX=disabled

setenforce 0

service sshd restart

sftp andy@192.168.1.200