1. 复制/etc/skel目录为/home/tuser1,要求/home/tuser1及其内部文件的属组和其它用户均没有任何访问权限。
[root@mail ~]# cp -r /etc/skel/ /home/tuser1
[root@mail ~]# chmod 700 /home/tuser1/
2. 编辑/etc/group文件,添加组hadoop。
[root@mail ~]# vim /etc/group
61 hadoop:x:5111:
3、手动编辑/etc/passwd文件新增一行,添加用户hadoop,其基本组ID为hadoop组的id号;其家目录为/home/hadoop。
[root@mail ~]# vim /etc/passwd
40 hadoop:x:5110:5111::/home/hdoop:/bin/bash
4、复制/etc/skel目录为/home/hadoop,要求修改hadoop目录的属组和其它用户没有任何访问权限。
[root@mail ~]# cp -r /etc/skel/ /home/hadoop
[root@mail ~]# chmod 700 /home/hadoop
5、修改/home/hadoop目录及其内部所有文件的属主为hadoop,属组为hadoop。
[root@mail ~]# chown -r hadoop:hadoop /home/hadoop
6、显示/proc/meminfo文件中以大写或小写S开头的行;用两种方式;
方法1:
[root@mail ~]# grep -E "^[sS]+" /proc/meminfo
SwapCached: 0 kB
SwapTotal: 7341048 kB
SwapFree: 7341048 kB
Shmem: 776 kB
Slab: 52152 kB
SReclaimable: 38556 kB
SUnreclaim: 13596 kB
方法2:
[root@mail ~]# grep "^[sS]\+" /proc/meminfo
SwapCached: 0 kB
SwapTotal: 7341048 kB
SwapFree: 7341048 kB
Shmem: 776 kB
Slab: 52144 kB
SReclaimable: 38552 kB
SUnreclaim: 13592 kB
7、显示/etc/passwd文件中其默认shell为非/sbin/nologin的用户;
[root@mail ~]# grep "/sbin/nologin$" /etc/passwd
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
saslauth:x:499:76:Saslauthd user:/var/empty/saslauth:/sbin/nologin
postfix:x:1000:1000::/var/spool/postfix:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
www:x:500:500::/home/www:/sbin/nologin
dovecot:x:97:97:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin
dovenull:x:498:499:Dovecot's unauthorized user:/usr/libexec/dovecot:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
ppp:x:4007:4007::/home/ppp:/sbin/nologin
iii:x:4008:4008::/home/iii:/sbin/nologin
8、显示/etc/passwd文件中其默认shell为/bin/bash的用户;
[root@mail ~]# grep "/bin/bash$" /etc/passwd
root:x:0:0:root:/root:/bin/bash
zabbix:x:501:501::/home/zabbix:/bin/bash
lizhaowen:x:502:502::/home/lizhaowen:/bin/bash
mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
lzw:x:1001:1001::/home/lzw:/bin/bash
gentoo:x:4001:4001::/var/tmp/gentoo:/bin/bash
user1:x:4004:4004::/home/user1:/bin/bash
onvv:x:4005:4005::/home/onvv:/bin/bash
mageia:x:1100:1100::/home/linux:/bin/bash
hadoop:x:5110:5111::/home/hdoop:/bin/bash
9、找出/etc/passwd文件中的一位数或两位数;
[root@mail ~]# grep -E "\<[0-9]\>|\<[0-9][0-9]\>" /etc/passwd -o
0
1
1
2
2
3
4
4
7
5
0
6
0
7
0
8
12
...
10、显示/boot/grub/grub.conf中以至少一个空白字符开头的行;
[root@mail ~]# grep -E "^[[:space:]]+" /boot/grub/grub.conf
root (hd0,0)
kernel /vmlinuz-2.6.32-573.el6.i686 ro root=/dev/mapper/vg_zabbixserver-lv_root rd_NO_LUKS LANG=zh_CN.UTF-8 rd_NO_MD rd_LVM_LV=vg_zabbixserver/lv_root crashkernel=auto rd_LVM_LV=vg_zabbixserver/lv_swap KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet
initrd /initramfs-2.6.32-573.el6.i686.img
11、显示/etc/rc.d/rc.sysinit文件中以#开头,后面跟至少一个空白字符,而后又有至少一个非空白字符的行;
[root@mail ~]# grep -E "^#[[:space:]]+[^[:space:]]+" /etc/rc.d/rc.sysinit
# /etc/rc.d/rc.sysinit - run once at boot time
# Taken in part from Miquel van Smoorenburg's bcheckrc.
# Check SELinux status
# Print a text banner.
# Only read this once.
# Initialize hardware
# Set default affinity
# Load other user-defined modules
# Load modules (for backward compatibility with VARs)
# Configure kernel parameters
# Set the hostname.
# Sync waiting for storage.
# Device mapper & related initialization
# Start any MD RAID arrays that haven't been started yet
# Remount the root filesystem read-write.
# Clean up SELinux labels
# If relabeling, relabel mount points.
# Mount all other filesystems (except for NFS and /proc, which is already
....
12、打出netstat -tan命令执行结果中以‘LISTEN’,后或跟空白字符结尾的行;
[root@mail ~]# netstat -tan | grep -E "LISTEN[[:space:]]*$"
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:10050 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
tcp 0 0 :::10050 :::* LISTEN
tcp 0 0 :::22 :::* LISTEN
tcp 0 0 :::25 :::* LISTEN
13、添加用户bash, testbash, basher, nologin (此一个用户的shell为/sbin/nologin),而后找出当前系统上其用户名和默认shell相同的用户的信息;
[root@mail ~]#useradd -s /sbin/bash bash
[root@mail ~]#useradd -s /sbin/bash testbash
[root@mail ~]#useradd -s /sbin/bash basher
[root@mail ~]#useradd -s /sbin/nologin nologin
[root@mail ~]# grep -E "^\<([[:alnum:]]+)\>.*\1$" /etc/passwd
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
bash:x:5111:5112::/home/bash:/bin/bash
nologin:x:5114:5115::/home/nologin:/sbin/nologin
网友评论