美文网首页
Linux云计算学习笔记day20

Linux云计算学习笔记day20

作者: 我要笑 | 来源:发表于2019-04-23 20:49 被阅读0次

    自己搭建网站流程:

    1.购买云服务器
    2.在服务器上面 搭建网站环境 lnmp
    3.购买域名
    https://wanwang.aliyun.com/

    修改权限

    通过数字
    chmod  755   /oldboy/oldboy.txt 
    
    通过字母
    -rw-r--r--  1 root root  321 Apr 16 12:19 oldboy.txt.bak
     u  g  o 
    

    user group other
    所有者 所属用户组 其他人

    chmod u/g/o +|-|= 权限 oldboy.txt
    给文件加上执行权限(/etc/rc.d/rc.local )
    [root@oldboyedu59 ~]# chmod +x /etc/rc.d/rc.local
    [root@oldboyedu59 ~]# ll /etc/rc.d/rc.local
    -rwxr-xr-x. 1 root root 473 Oct 31 07:31 /etc/rc.d/rc.local

    搭建测试权限环境
    mkdir -p /oldboy/
    echo pwd >/oldboy/lidao.sh
    chown oldboy.oldboy /oldboy/lidao.sh

    useradd oldboy 如果oldboy有问题则删除 再添加

    需要2个窗口
    root oldboy

    root 下面测试 rwx

    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    -rw-r--r-- 1 root root 4 Apr 23 09:58 /oldboy/lidao.sh
    [root@oldboyedu59 ~]# chmod +x /oldboy/lidao.sh
    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    -rwxr-xr-x 1 root root 4 Apr 23 09:58 /oldboy/lidao.sh
    [root@oldboyedu59 ~]# cat /oldboy/lidao.sh
    pwd
    [root@oldboyedu59 ~]# echo 'hostname' >>/oldboy/lidao.sh 
    [root@oldboyedu59 ~]# /oldboy/lidao.sh
    /root
    oldboyedu59
    

    测试 文件的rwx权限开始###

    root修改权限

    oldboy下测试

    root 修改权限

    [root@oldboyedu59 ~]# chmod u=r /oldboy/lidao.sh 
    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    -r--r-xr-x 1 root root 13 Apr 23 10:00 /oldboy/lidao.sh
    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    -r--r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh
    

    oldboy下 测试文件的r权限

    [oldboy@oldboyedu59 ~]$ ll /oldboy/lidao.sh 
    -r--r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh
    [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh
    pwd
    hostname
    [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh
    -bash: /oldboy/lidao.sh: Permission denied
    [oldboy@oldboyedu59 ~]$ /oldboy/lidao.sh
    -bash: /oldboy/lidao.sh: Permission denied
    

    文件的r小结:
    是否能查看文件的内容

    [root@oldboyedu59 ~]# #root 修改权限 w
    [root@oldboyedu59 ~]# 
    [root@oldboyedu59 ~]# 
    [root@oldboyedu59 ~]# chmod u=w /oldboy/lidao.sh 
    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    --w-r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh
    

    W10: Warning: Changing a readonly file

    oldboy进行测试

      ldboy@oldboyedu59 ~]$ ll /oldboy/lidao.sh
    ▽-w-r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh
    [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh
    cat: /oldboy/lidao.sh: Permission denied
    [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh
    [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh
    [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh
    cat: /oldboy/lidao.sh: Permission denied
    [oldboy@oldboyedu59 ~]$ /oldboy/lidao.sh
    -bash: /oldboy/lidao.sh: Permission denied
    

    文件的rw小结:
    1.r 是否能查看文件的内容
    2.w 是否能修改文件内容 需要r配合
    3.只有w的时候vim强制修改文件 会导致源文件内容被覆盖

    [root@oldboyedu59 ~]# #root 修改权限 x
    [root@oldboyedu59 ~]# chmod u=x /oldboy/lidao.sh 
    [root@oldboyedu59 ~]# ll /oldboy/lidao.sh
    ---xr-xr-x 1 oldboy oldboy 19 Apr 23 10:14 /oldboy/lidao.sh
    

    文件的rwx小结:
    1.r 是否能查看文件的内容
    2.w 是否能修改文件内容 需要r配合
    3.只有w的时候vim强制修改文件 会导致源文件内容被覆盖
    4.x 是否能执行(命令或脚本) 需要r配合

    root 环境准备

    mkdir -p /oldboy/lidao
    chown oldboy.oldboy /oldboy/lidao
    touch /oldboy/lidao{01..5}.txt
    [root@oldboyedu59 ~]# ll -d /oldboy/lidao
    drwxr-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao

    root 测试目录r权限

    [root@oldboyedu59 ~]# chmod u=r /oldboy/lidao
    [root@oldboyedu59 ~]# ll -d /oldboy/lidao
    dr--r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao

    oldboy 测试目录r权限

    [oldboy@oldboyedu59 /oldboy]$ ll -d  lidao
    dr--r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 lidao
    [oldboy@oldboyedu59 /oldboy]$ ls -l  lidao
    ls: cannot access lidao/oldboy01.txt: Permission denied
    ls: cannot access lidao/oldboy02.txt: Permission denied
    ls: cannot access lidao/oldboy03.txt: Permission denied
    ls: cannot access lidao/oldboy04.txt: Permission denied
    ls: cannot access lidao/oldboy05.txt: Permission denied
    ls: cannot access lidao/alex01.txt: Permission denied
    ls: cannot access lidao/alex02.txt: Permission denied
    ls: cannot access lidao/alex03.txt: Permission denied
    ls: cannot access lidao/alex04.txt: Permission denied
    ls: cannot access lidao/alex05.txt: Permission denied
    ls: cannot access lidao/oldboy.txt: Permission denied
    total 0
    -????????? ? ? ? ?            ? alex01.txt
    -????????? ? ? ? ?            ? alex02.txt
    -????????? ? ? ? ?            ? alex03.txt
    -????????? ? ? ? ?            ? alex04.txt
    -????????? ? ? ? ?            ? alex05.txt
    -????????? ? ? ? ?            ? oldboy01.txt
    -????????? ? ? ? ?            ? oldboy02.txt
    -????????? ? ? ? ?            ? oldboy03.txt
    -????????? ? ? ? ?            ? oldboy04.txt
    -????????? ? ? ? ?            ? oldboy05.txt
    -????????? ? ? ? ?            ? oldboy.txt
    
    [root@oldboyedu59 ~]# #测试目录的w 
    [root@oldboyedu59 ~]# chmod u=w /oldboy/lidao
    [root@oldboyedu59 ~]# ll -d /oldboy/lidao
    d-w-r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao
    
    [oldboy@oldboyedu59 /oldboy]$ ls -l /root/
    ls: cannot open directory /root/: Permission denied
    
    [oldboy@oldboyedu59 /oldboy]$ touch  /etc/passwd.txt
    touch: cannot touch ‘/etc/passwd.txt’: Permission denied
    
    [oldboy@oldboyedu59 /oldboy]$ rm -f /etc/hosts 
    rm: cannot remove ‘/etc/hosts’: Permission denied
    
    [oldboy@oldboyedu59 /oldboy]$ cat /etc/shadow
    cat: /etc/shadow: Permission denied 
    
    [oldboy@oldboyedu59 /oldboy]$ echo '#' >>/etc/passwd
    -bash: /etc/passwd: Permission denied   
    

    Permission denied

    查看umask

    [root@oldboyedu59 ~]# umask
    0022

    文件默认权限的由来

    666
    -022
    =644

    目录默认的权限由来

    777
    -022
    =755

    umask 032

    文件默认权限的由来

    666
    -032
    =634
    +010
    644

    目录默认的权限由来

    777
    -032
    =745

    1.umask 035 file dir默认的权限
    file 666
    -035
    631

      642 
    

    dir 777
    035
    742

    2.创建文件的时候权限是000,创建目录的时候权限是111 umask?

    模拟环境:
    useradd www
    mkdir -p /app/blog/uploads
    touch /app/blog/guoav{01..5}-blue-ray-4k.mkv.torrent

    root 窗口 www窗口

    [oldboy@oldboyedu59 /app/blog]$ touch /app/blog/uploads/ycw-5k-100tb.torrent 
    touch: cannot touch ‘/app/blog/uploads/ycw-5k-100tb.torrent’: Permission denied
    [oldboy@oldboyedu59 /app/blog]$ ll -d /app/blog/uploads/ycw-5k-100tb.torrent
    ls: cannot access /app/blog/uploads/ycw-5k-100tb.torrent: No such file or directory
    [oldboy@oldboyedu59 /app/blog]$ ll -d /app/blog/uploads/
    drwxr-xr-x 2 root root 6 Apr 23 11:55 /app/blog/uploads/
    

    方法1 给uploads 目录o+w

    方法2 把uploads 修改为www.www

    网站程序代码 /app/blog 目录 站点目录(单机权限控制)

    1.谁运行网站程序
    虚拟用户 www

    2.控制权限
    站点目录下文件 644 root root
    站点目录下目录 755 root root

    3.对于上传目录uploads
    站点目录下文件 644 www www
    站点目录下目录 755 www www

    4.通过程序控制 只能上传图片或压缩包

    5.取消上传上来的文件的执行权限(讲解到nfs的时候)

    相关文章

      网友评论

          本文标题:Linux云计算学习笔记day20

          本文链接:https://www.haomeiwen.com/subject/vtobgqtx.html