Bii o ṣe le Mu tiipa ati Atunbere Awọn pipaṣẹ ni Lainos

Awọn iṣeto pipaṣẹ pipa ni akoko kan fun eto Linux lati fi agbara ṣiṣẹ, o le ṣee lo bakanna lati da duro, pipa-agbara tabi atunbere ẹrọ nigbati a ba pe pẹlu awọn aṣayan pato ati atunbere kọ eto naa lati tun bẹrẹ.

Awọn idoti Linux kan bii Ubuntu, Linux Mint, Mandriva kan lati mẹnuba ṣugbọn diẹ diẹ, jẹ ki o ṣee ṣe lati atunbere/da duro/tiipa eto bi olumulo deede, nipasẹ aiyipada. Eyi kii ṣe eto apẹrẹ paapaa lori awọn olupin, o gbọdọ jẹ nkan lati ṣe aniyan nipa pataki fun olutọju eto kan.

Ninu nkan yii, a yoo fihan bi o ṣe le mu tiipa ati atunbere awọn aṣẹ fun awọn olumulo deede ni Linux.

Mu tiipa ati Atunbere Awọn pipaṣẹ ni Lainos

Ọna to rọọrun lati mu tiipa ati atunbere awọn ofin nipa lilo faili/ati be be lo/sudoers, nibi o le ṣafihan olumulo kan (tecmint) tabi ẹgbẹ (awọn olupilẹṣẹ) eyiti a ko gba laaye lati ṣe awọn ofin wọnyi.

# vi /etc/sudoers

Ṣafikun awọn ila wọnyi si apakan Awọn orukọ aliases.

Cmnd_Alias     SHUTDOWN = /sbin/shutdown,/sbin/reboot,/sbin/halt,/sbin/poweroff

# User privilege specification
tecmint   ALL=(ALL:ALL) ALL, !SHUTDOWN

# Allow members of group sudo to execute any command
%developers  ALL=(ALL:ALL) ALL,  !SHUTDOWN

Bayi gbiyanju lati ṣiṣẹ tiipa ati atunbere awọn aṣẹ bi olumulo normail (tecmint).

Ọna miiran ni lati yọ awọn igbanilaaye ipaniyan lori tiipa ati atunbere awọn aṣẹ fun gbogbo awọn olumulo ayafi gbongbo.

# chmod o-x /sbin/shutdown
# chmod o-x /sbin/reboot

Akiyesi: Labẹ eto, faili wọnyi (/ sbin/tiipa,/sbin/atunbere,/sbin/da duro,/sbin/poweroff) jẹ awọn ọna asopọ ami aami si/bin/systemctl:

# ls -l /sbin/shutdown
# ls -l /sbin/reboot
# ls -l /sbin/halt
# ls -l /sbin/poweroff

Lati yago fun awọn olumulo miiran lati ṣiṣe awọn ofin wọnyi, iwọ yoo jiroro yọ awọn igbanilaaye ipaniyan bi a ti salaye loke, ṣugbọn eyi ko munadoko labẹ eto. O le yọ awọn igbanilaaye ipaniyan lori /bin/systemctl ti o tumọ si pe gbogbo awọn olumulo miiran ayafi gbongbo yoo ṣiṣẹ systemctl nikan.

# chmod  o-x /bin/systemctl

O tun le fẹ kọ ẹkọ bi o ṣe le mu awọn iṣẹ-ṣiṣe kan ṣiṣẹ bi iwọle root root SSH ati idinwo iraye si SSH, SELinux, awọn iṣẹ ti aifẹ ni Lainos nipasẹ kika nipasẹ awọn itọsọna wọnyi:

  1. Bii o ṣe le Jeki ati Muu Wiwọle Gbongbo ni Ubuntu
    2. Bii a ṣe le Muu SELinux Ni igba diẹ tabi Pipẹ ni RHEL/CentOS 7/6
  2. Muu tabi Muu Wiwọle Wọle SSH ati Diwọn Wiwọle SSH ni Lainos
  3. Bii o ṣe le Dẹkun ati Mu Awọn iṣẹ Ainifẹ lati Eto Linux

O n niyen! Ninu nkan yii, a fihan bi a ṣe le mu tiipa ati atunbere awọn aṣẹ fun awọn olumulo eto deede ni Linux. Ṣe o mọ ti ọna miiran ti ṣiṣe eyi, pin pẹlu wa ninu awọn asọye.