{"id":506,"date":"2021-07-23T16:20:53","date_gmt":"2021-07-23T08:20:53","guid":{"rendered":"http:\/\/149.28.72.201\/?p=506"},"modified":"2021-12-20T10:43:21","modified_gmt":"2021-12-20T02:43:21","slug":"linux-facl","status":"publish","type":"post","link":"https:\/\/www.oceansource.cc\/?p=506","title":{"rendered":"21\u3001\u6587\u4ef6\u7cfb\u7edf\u8bbf\u95ee\u63a7\u5236\u5217\u8868FACL"},"content":{"rendered":"\n

\u7ec3\u4e60\uff1a\u5199\u4e00\u4e2a\u811a\u672c<\/p>\n\n\n\n

\u5199\u4e00\u4e2a\u811a\u672c\uff0c\u663e\u793a\u5f53\u524d\u7cfb\u7edf\u4e0ashell\u4e3a-s\u6307\u5b9a\u7c7b\u578b\u7684\u7528\u6237\uff0c\u5e76\u7edf\u8ba1\u5176\u7528\u6237\u603b\u6570\u3002-s\u9009\u9879\u540e\u9762\u8ddf\u7684\u53c2\u6570\u5fc5\u987b\u662f\/etc\/shells\u6587\u4ef6\u4e2d\u5b58\u5728\u7684shell\u7c7b\u578b\uff0c\u5426\u5219\u4e0d\u6267\u884c\u6b64\u811a\u672c\u3002\u53e6\u5916\uff0c\u6b64\u811a\u672c\u8fd8\u53ef\u4ee5\u63a5\u53d7–help\u9009\u9879\uff0c\u4ee5\u663e\u793a\u5e2e\u52a9\u4fe1\u606f\u3002\u811a\u672c\u6267\u884c\u5f62\u5982\uff1a<\/p>\n\n\n\n

.\/showshells.sh -s bash<\/p>\n\n\n\n

\u663e\u793a\u7ed3\u679c\u5f62\u5982\uff1a<\/p>\n\n\n\n

BASH\uff0c3users\uff0cthey are:<\/p>\n\n\n\n

root,redhat,gentoo<\/p>\n\n\n\n

#!\/bin\/bash<\/p>\n\n\n\n

#<\/p>\n\n\n\n

if [ $1 == ‘-s’ ]; then<\/p>\n\n\n\n

  ! grep “${2}$” \/etc\/shells &> \/dev\/null && echo “Invalid shell.” && exit 7<\/p>\n\n\n\n

elif [ $1 == ‘–help’ ];then<\/p>\n\n\n\n

  echo “Usage: showshells.sh -s SHELL | –help”<\/p>\n\n\n\n

  exit 0<\/p>\n\n\n\n

else<\/p>\n\n\n\n

  echo “Unknown Options.”<\/p>\n\n\n\n

  exit 8<\/p>\n\n\n\n

fi<\/p>\n\n\n\n

NUMOFUSER=`grep “${2}$” \/etc\/passwd | wc -l`<\/p>\n\n\n\n

SHELLUSERS=`grep “${2}$” \/etc\/passwd | cut -d: -f1`<\/p>\n\n\n\n

SHELLUSERS=`echo $SHELLUSERS | sed ‘s@[[:space:]]@,@g’`<\/p>\n\n\n\n

echo -e “$2, $NUMOFUSER users, they are: \\n$SHELLUSERS”<\/p>\n\n\n\n

${\u53d8\u91cf\u540d}<\/p>\n\n\n\n

21.1 \u6587\u4ef6\u7cfb\u7edf\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff1a<\/p>\n\n\n\n

tom:<\/p>\n\n\n\n

    tom, tom\u57fa\u672c\u7ec4<\/p>\n\n\n\n

jerry: other:r–<\/p>\n\n\n\n

\u60f3\u8ba9jerry\u8bbf\u95eetom\u521b\u5efa\u7684\u6587\u4ef6\uff0c\u5e76\u4e14\u4e0d\u8ba9\u5176\u4ed6\u4eba\u8bbf\u95ee<\/p>\n\n\n\n

FACL\uff1aFilesystem Access Control List\uff08\u6587\u4ef6\u7cfb\u7edf\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff09<\/p>\n\n\n\n

\u5229\u7528\u6587\u4ef6\u6269\u5c55\u4fdd\u5b58\u989d\u5916\u7684\u8bbf\u95ee\u63a7\u5236\u6743\u9650<\/p>\n\n\n\n

jerry: rw-<\/p>\n\n\n\n

21.1.1 FACL\u914d\u7f6e<\/p>\n\n\n\n

\uff081\uff09setfacl\uff08\u8bbe\u7f6eFACL\uff09<\/p>\n\n\n\n

-m: \u8bbe\u5b9a<\/p>\n\n\n\n

u:UID:perm<\/p>\n\n\n\n

g:GID:perm<\/p>\n\n\n\n

-x\uff1a\u53d6\u6d88<\/p>\n\n\n\n

u:UID<\/p>\n\n\n\n

g:GID<\/p>\n\n\n\n

\uff082\uff09getfacl\uff08\u67e5\u770bFACL\uff09<\/p>\n\n\n\n

21.2 \u51e0\u4e2a\u547d\u4ee4\uff1a<\/p>\n\n\n\n

w\uff1a<\/p>\n\n\n\n

\u67e5\u770b\u5f53\u524d\u767b\u5f55\u5230\u7cfb\u7edf\u4e0a\u7684\u7528\u6237\u53ca\u5176\u5728\u5904\u7406\u7684\u4e8b\u60c5<\/p>\n\n\n\n

who\uff1a<\/p>\n\n\n\n

\u67e5\u770b\u5f53\u524d\u767b\u5f55\u5230\u7cfb\u7edf\u4e0a\u7684\u7528\u6237\u53ca\u5176\u767b\u5f55\u4fe1\u606f<\/p>\n\n\n\n

[root@Daniel-LASV ~]# who<\/p>\n\n\n\n

root     pts\/0        2021-06-10 01:58 (116.228.4.126)<\/p>\n\n\n\n

[root@Daniel-LASV ~]# w<\/p>\n\n\n\n

 01:59:05 up 215 days, 18:16,  1 user,  load average: 0.03, 0.01, 0.00<\/p>\n\n\n\n

USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT<\/p>\n\n\n\n

root     pts\/0    116.228.4.126    01:58    1.00s  0.00s  0.00s w<\/p>\n\n\n\n

[root@Daniel-LASV ~]# <\/p>\n\n\n\n

\u6bcf\u96945\u79d2\u949f\uff0c\u5c31\u6765\u67e5\u770bhadoop\u662f\u5426\u5df2\u7ecf\u767b\u5f55\uff0c\u5982\u767b\u5f55\uff0c\u663e\u793a\u5176\u5df2\u7ecf\u767b\u5f55\uff0c\u5e76\u9000\u51fa\uff1b<\/p>\n\n\n\n

sleep \uff1a<\/p>\n\n\n\n

\u8ba9\u8fdb\u7a0b\u5ef6\u8fdf\u51e0\u79d2\u949f<\/p>\n\n\n\n

whoami\uff1a<\/p>\n\n\n\n

\u5f53\u524d\u7cfb\u7edf\u7684\u6709\u6548\u7528\u6237<\/p>\n\n\n\n

last\uff1a<\/p>\n\n\n\n

\u663e\u793a\/var\/log\/wtmp\u6587\u4ef6\uff0c\u663e\u793a\u7528\u6237\u767b\u5f55\u5386\u53f2\u53ca\u7cfb\u7edf\u91cd\u542f\u5386\u53f2<\/p>\n\n\n\n

    -n #: \u663e\u793a\u6700\u8fd1#\u6b21\u7684\u76f8\u5173\u4fe1\u606f<\/p>\n\n\n\n

    [root@Daniel-R480 tmp]# last -4<\/p>\n\n\n\n

    root     pts\/1        localhost        Thu Jun 10 09:54   still logged in   <\/p>\n\n\n\n

    root     pts\/0        localhost        Thu Jun 10 09:03   still logged in   <\/p>\n\n\n\n

    root     pts\/1        localhost        Wed Jun  9 17:16 – 09:54  (16:37)    <\/p>\n\n\n\n

    root     pts\/0        localhost        Wed Jun  9 17:04 – 09:03  (15:59)    <\/p>\n\n\n\n

    wtmp begins Wed Jun  9 14:30:27 2021<\/p>\n\n\n\n

lastb:<\/p>\n\n\n\n

\/var\/log\/btmp\u6587\u4ef6\uff0c\u663e\u793a\u7528\u6237\u9519\u8bef\u7684\u767b\u5f55\u5c1d\u8bd5<\/p>\n\n\n\n

-n #:<\/p>\n\n\n\n

    [root@Daniel-SHSH ~]# lastb -3<\/p>\n\n\n\n

    root     ssh:notty    65.78.170.48     Tue Jun  8 21:12 – 21:12  (00:00)    <\/p>\n\n\n\n

    root     ssh:notty    65.78.170.48     Tue Jun  8 21:12 – 21:12  (00:00)    <\/p>\n\n\n\n

    root     ssh:notty    65.78.170.48     Tue Jun  8 21:12 – 21:12  (00:00)    <\/p>\n\n\n\n

    btmp begins Sat Jun  5 01:06:32 2021<\/p>\n\n\n\n

lastlog: <\/p>\n\n\n\n

\u663e\u793a\u6bcf\u4e00\u4e2a\u7528\u6237\u6700\u8fd1\u4e00\u6b21\u7684\u6210\u529f\u767b\u5f55\u4fe1\u606f\uff1b<\/p>\n\n\n\n

   -u USERNAME: \u663e\u793a\u7279\u5b9a\u7528\u6237\u6700\u8fd1\u7684\u767b\u5f55\u4fe1\u606f<\/p>\n\n\n\n

    [root@Daniel-R480 tmp]# lastlog -u daniel<\/p>\n\n\n\n

    Username         Port     From             Latest<\/p>\n\n\n\n

    daniel           pts\/1                     Thu Jun 10 09:58:18 +0800 2021<\/p>\n\n\n\n

basename:<\/p>\n\n\n\n

    $0: \u6267\u884c\u811a\u672c\u65f6\u7684\u811a\u672c\u8def\u5f84\u53ca\u540d\u79f0<\/p>\n\n\n\n

    [root@Daniel-R480 ~]# basename .\/quit.sh <\/p>\n\n\n\n

    quit.sh<\/p>\n\n\n\n

mail\uff1a<\/p>\n\n\n\n

\u67e5\u770b\u90ae\u4ef6<\/p>\n\n\n\n

[root@Daniel-SHSH ~]# mail<\/p>\n\n\n\n

No mail for root<\/p>\n\n\n\n

hostname: <\/p>\n\n\n\n

       \u663e\u793a\u4e3b\u673a\u540d<\/p>\n\n\n\n

[root@Daniel-SHSH ~]# hostname<\/p>\n\n\n\n

Daniel-SHSH<\/p>\n\n\n\n

[root@Daniel-SHSH ~]# echo $HOSTNAME<\/p>\n\n\n\n

Daniel-SHSH<\/p>\n\n\n\n

[root@Daniel-R480 ~]# hostname test<\/p>\n\n\n\n

[root@Daniel-R480 ~]# hostname<\/p>\n\n\n\n

test<\/p>\n\n\n\n

[root@Daniel-R480 ~]# su – root<\/p>\n\n\n\n

Last login: Thu Jun 10 09:58:28 CST 2021 on tty1<\/p>\n\n\n\n

[root@test ~]# <\/p>\n\n\n\n

\u5982\u679c\u5f53\u524d\u4e3b\u673a\u7684\u4e3b\u673a\u540d\u4e0d\u662fwww.magedu.com\uff0c\u5c31\u5c06\u5176\u6539\u4e3awww.magedu.com<\/p>\n\n\n\n

\u5982\u679c\u5f53\u524d\u4e3b\u673a\u7684\u4e3b\u673a\u540d\u662flocalhost\uff0c\u5c31\u5c06\u5176\u6539\u4e3awww.magedu.com<\/p>\n\n\n\n

\u5982\u679c\u5f53\u524d\u4e3b\u673a\u7684\u4e3b\u673a\u540d\u4e3a\u7a7a\uff0c\u6216\u8005\u4e3a(none)\uff0c\u6216\u8005\u4e3alocalhost\uff0c\u5c31\u5c06\u5176\u6539\u4e3awww.magedu.com<\/p>\n\n\n\n

[ -z `hostname` ] || [ `hostname` == ‘(none)’ o `hostname` == ‘localhost’ ] && hostname www.magedu.com<\/a><\/p>\n\n\n\n

\u751f\u6210\u968f\u673a\u6570<\/p>\n\n\n\n

RANDOM: 0-32768<\/p>\n\n\n\n

[daniel@Daniel-R480 ~]$ echo $RANDOM<\/p>\n\n\n\n

20744<\/p>\n\n\n\n

linux\u4e0b\u7684\u968f\u673a\u6570\u751f\u6210\u5668\uff1a\u71b5\u6c60<\/p>\n\n\n\n

\/dev\/random:<\/p>\n\n\n\n

\/dev\/urandom:<\/p>\n\n\n\n

\u7ec8\u7aef\u7c7b\u578b\uff1a<\/p>\n\n\n\n

console\uff1a\u63a7\u5236\u53f0<\/p>\n\n\n\n

pty:\u7269\u7406\u7ec8\u7aef\uff08\u901a\u8fc7VGA\u8fde\u63a5\uff09<\/p>\n\n\n\n

tty:\u865a\u62df\u7ec8\u7aef\uff08\u901a\u8fc7vga\u8fde\u63a5\uff09<\/p>\n\n\n\n

ttys\uff1a\u4e32\u884c\u7ec8\u7aef<\/p>\n\n\n\n

pts\/#:\u4f2a\u7ec8\u7aef<\/p>\n\n\n\n

\u5199\u4e00\u4e2a\u811a\u672c\uff0c\u5229\u7528RANDOM\u751f\u621010\u4e2a\u968f\u673a\u6570\uff0c\u5e76\u627e\u51fa\u5176\u4e2d\u7684\u6700\u5927\u503c\uff0c\u548c\u6700\u5c0f\u503c\uff1b<\/p>\n\n\n\n

#!\/bin\/bash<\/p>\n\n\n\n

#<\/p>\n\n\n\n

declare -i MAX=0<\/p>\n\n\n\n

declare -i MIN=0<\/p>\n\n\n\n

for I in {1..10}; do<\/p>\n\n\n\n

  MYRAND=$RANDOM<\/p>\n\n\n\n

  [ $I -eq 1 ] && MIN=$MYRAND<\/p>\n\n\n\n

  if [ $I -le 9 ]; then<\/p>\n\n\n\n

    echo -n “$MYRAND,”<\/p>\n\n\n\n

  else<\/p>\n\n\n\n

    echo “$MYRAND”<\/p>\n\n\n\n

  fi<\/p>\n\n\n\n

  [ $MYRAND -gt $MAX ] && MAX=$MYRAND<\/p>\n\n\n\n

  [ $MYRAND -lt $MIN ] && MIN=$MYRAND<\/p>\n\n\n\n

done<\/p>\n\n\n\n

echo $MAX, $MIN<\/p>\n","protected":false},"excerpt":{"rendered":"

\u7ec3\u4e60\uff1a\u5199\u4e00\u4e2a\u811a\u672c \u5199\u4e00\u4e2a\u811a\u672c\uff0c\u663e\u793a\u5f53\u524d\u7cfb\u7edf\u4e0ashell\u4e3a-s\u6307\u5b9a\u7c7b\u578b\u7684\u7528\u6237\uff0c\u5e76\u7edf\u8ba1\u5176\u7528\u6237\u603b\u6570\u3002-s\u9009\u9879\u540e\u9762\u8ddf\u7684 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-506","post","type-post","status-publish","format-standard","hentry","category-linux"],"aioseo_notices":[],"views":86,"_links":{"self":[{"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/posts\/506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=506"}],"version-history":[{"count":1,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/posts\/506\/revisions"}],"predecessor-version":[{"id":507,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=\/wp\/v2\/posts\/506\/revisions\/507"}],"wp:attachment":[{"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oceansource.cc\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}