</noscript> <script> function stop(){ return false; } document.oncontextmenu=stop; </script><link href="http://www.zhiqimba.com/thread-2304-1-1.html" rel="canonical" /><base href="http://www.zhiqimba.com/" /><link rel="stylesheet" type="text/css" href="data/cache/style_3_common.css?Xw0" /><link rel="stylesheet" type="text/css" href="data/cache/style_3_forum_viewthread.css?Xw0" /><script type="text/javascript">var STYLEID = '3', STATICURL = 'static/', IMGDIR = 'static/image/common', VERHASH = 'Xw0', charset = 'utf-8', discuz_uid = '0', cookiepre = 'K8iT_2132_', cookiedomain = '', cookiepath = '/', showusercard = '1', attackevasive = '0', disallowfloat = 'login|newthread', creditnotice = '1|威望|,2|金钱|,3|贡献|,4|职币|', defaultstyle = '', REPORTURL = 'aHR0cDovL3d3dy56aGlxaW1iYS5jb20vdGhyZWFkLTIzMDQtMS0xLmh0bWw=', SITEURL = 'http://www.zhiqimba.com/', JSPATH = 'data/cache/', CSSPATH = 'data/cache/style_', DYNAMICURL = '', DEFAULTAVATAR = 'http://www.zhiqimba.com/uc_server/data/avatar/noavatar.svg';</script> <script src="data/cache/common.js?Xw0" type="text/javascript"></script> <style> .dz_btm_layer{width: 1200px;margin: 0 auto;} .dz_btm_layer .dz_layer_nav{width: 609px;} .dz_btm_layer .header-searcher .search-input{width: 200px;} .dz_footc{background: #333333;} .dz_footc a,.dz_footc_nav .pipe{color: var(--dz-bgfglass);} .dz_footc_copy{color: var(--dz-bgfglass);} .dz_footc_nav{border-bottom: 1px solid var(--dz-bgfglass);} .dz_footc_dico{background: none;} </style><meta charset="utf-8" /> <meta name="renderer" content="webkit" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="keywords" content="职起网,书工厂,课程,资料,中级经济师,一级建造师,cpa" /> <meta name="description" content="拒绝碎片化，系统性学习，让考证更容易！ " /> <meta name="generator" content="Discuz! X5.0" /> <meta name="author" content="Discuz! Team" /> <meta name="copyright" content="2001-2026 Discuz! Team." /> <meta name="MSSmartTagsPreventParsing" content="True" /> <meta http-equiv="MSThemeCompatible" content="Yes" /> <meta name="application-name" content="职起网" /> <meta name="msapplication-tooltip" content="职起网" /> <meta name="msapplication-task" content="name=门户;action-uri=http://www.zhiqimba.com/portal.php;icon-uri=http://www.zhiqimba.com/static/image/common/portal.ico" /><meta name="msapplication-task" content="name=首页;action-uri=http://www.zhiqimba.com/forum.php;icon-uri=http://www.zhiqimba.com/static/image/common/bbs.ico" /> <meta name="msapplication-task" content="name=群组;action-uri=http://www.zhiqimba.com/group.php;icon-uri=http://www.zhiqimba.com/static/image/common/group.ico" /><link rel="archives" title="职起网" href="http://www.zhiqimba.com/archiver/" /> <link rel="stylesheet" id="css_widthauto" type="text/css" href='data/cache/style_3_widthauto.css?Xw0' /> <script type="text/javascript">HTMLNODE.className += ' widthauto'</script> <script src="data/cache/forum.js?Xw0" type="text/javascript"></script> <script src="static/js/mobile/jquery.min.js?Xw0" type="text/javascript"></script><script>jQuery.noConflict();</script> </head> <body id="nv_forum" class="pg_viewthread dz_pg_viewthread dz_tbnvb dz_wide discuzx5" onkeydown="if(event.keyCode==27) return false;"> <div id="append_parent"></div><div id="ajaxwaitid"></div> <div id="toptb" class="cl" style="display:none;"> <div class="wp"> <div class="z"><a href="javascript:;" onclick="setHomepage('http://www.zhiqimba.com/');">设为首页</a><a href="http://www.zhiqimba.com/" onclick="addFavorite(this.href, '职起网');return false;">收藏本站</a></div> <div class="y"> </div> <div class="clear"></div> </div> </div> <div id="dz_btm_layer" class="topbox"> <div class="dz_layer_top"> <div class="dz_btm_layer dz_nav"><div class="dz_nav_logo"> <a href="./" title="职起网" class="dzlogo"><img src="template/discuzx5/static//logo.png" alt="职起网" class="boardlogo" id="boardlogo" border="0" /></a></div> <div class="dz_layer_nav"> <ul> <li class="a" id="mn_forum" ><a href="forum.php" hidefocus="true" title="BBS" >首页<span>BBS</span></a></li> </ul> </div> <div class="dz_layer_dl"><div class="header-right"> <div class="header-searcher"> <div class="searcher-wrap"> <form method="post" autocomplete="off" action="search.php?searchsubmit=yes"> <input type="hidden" name="mod" value="forum" /> <input type="text" name="srchtxt" placeholder="请输入搜索内容" value="" class="search-input"> <button type="submit" name="searchsubmit" sc="1" class="search-icon" value="true"></button> </form> </div> </div> <div class="header-user-login"> <div class="login_btn"><a href="member.php?mod=logging&action=login" onclick="showWindow('login', this.href)">登录</a></div> </div> </div> <script type="text/javascript"> document.querySelectorAll('.header-user, .header-notice, .header-i18n, .header-client').forEach(function(element) { element.addEventListener('mouseenter', function() { this.classList.add('open'); }); element.addEventListener('mouseleave', function() { this.classList.remove('open'); }); }); if($("qmenu_loop")){ var qmenu_timer, qmenu_scroll_l; var qmenu_in = 0; var qmenu_width = 163; var qmenu_loop = $('qmenu_loop'); var qmenu_all_width = 41 * $('qmenu_loopul').getElementsByTagName("li").length - qmenu_width; if(qmenu_all_width < 20){ $('qmenu_an').style.display = 'none'; } } function qmenu_move(qmenu_lr){ if(qmenu_in == 0 && ((qmenu_lr == 1 && qmenu_loop.scrollLeft < qmenu_all_width) || (qmenu_lr == 0 && qmenu_loop.scrollLeft > 0))){ qmenu_in = 1; qmenu_scroll_l = qmenu_loop.scrollLeft; qmenu_timer = setInterval(function(){ qmenu_scroll(qmenu_lr); }, 10); } } function qmenu_scroll(qmenu_lr){ if((qmenu_lr == 1 && qmenu_loop.scrollLeft >= qmenu_width + qmenu_scroll_l) || (qmenu_lr == 0 && ((qmenu_loop.scrollLeft <= qmenu_scroll_l - qmenu_width) || qmenu_loop.scrollLeft == 0))){ clearInterval(qmenu_timer); qmenu_in = 0; }else{ if(qmenu_lr == 1){ qmenu_loop.scrollLeft += Math.round((qmenu_width + qmenu_scroll_l - qmenu_loop.scrollLeft) / 15) + 1; }else{ qmenu_loop.scrollLeft -= Math.round((qmenu_width - (qmenu_scroll_l - qmenu_loop.scrollLeft)) / 15) + 1; } } } </script></div> <div class="clear"></div> </div> </div> </div> <div class="wp" id="hds"> <div id="mu" class="cl"> </div> </div> <div id="wp" class="wp"> <link rel="stylesheet" id="css_widthauto" type="text/css" href='data/cache/style_3_widthauto.css?Xw0' /> <script type="text/javascript">HTMLNODE.className += ' widthauto'</script> <script src="data/cache/forum.js?Xw0" type="text/javascript"></script> <script type="text/javascript">var fid = parseInt('59'), tid = parseInt('2304');</script> <script src="data/cache/forum_viewthread.js?Xw0" type="text/javascript"></script> <script type="text/javascript">zoomstatus = parseInt(1);var imagemaxwidth = '900';var aimgcount = new Array();</script> <style id="diy_style" type="text/css"></style> <!--[diy=diynavtop]--><div id="diynavtop" class="area"></div><!--[/diy]--> <div id="pt" class="bm cl"> <div class="z"> <a href="./" class="nvhm" title="首页">职起网</a><em>»</em><a href="forum.php">首页</a> <em>›</em> <a href="forum.php?gid=39">技能提升</a> <em>›</em> <a href="forum-58-1.html">IT/互联网</a> <em>›</em> <a href="forum-59-1.html">Linux 私房菜</a> <em>›</em> <a href="thread-2304-1-1.html">7.6 重点回顾</a> </div> </div> <style id="diy_style" type="text/css"></style> <div class="wp"> <!--[diy=diy1]--><div id="diy1" class="area"></div><!--[/diy]--> </div> <div id="ct" class="wp cl"> <div id="pgt" class="pgs mbm cl "> <div class="pgt"></div> <span class="y pgb"><a href="forum-59-1.html">返回列表</a></span> <a id="newspecial" onmouseover="$('newspecial').id = 'newspecialtmp';this.id = 'newspecial';showMenu({'ctrlid':this.id})" onclick="location.href='forum.php?mod=post&action=newthread&fid=59';return false;" href="javascript:;" title="发新帖" class="pgsbtn showmenu">发新帖</a></div> <div id="postlist" class="pl bm"> <table class="posthead" cellspacing="0" cellpadding="0"> <tr> <td class="pls"> <div class="hm ptn"> <span class="xg1">查看:</span> <span class="xi1">973</span><span class="pipe">|</span><span class="xg1">回复:</span> <span class="xi1">0</span> </div> </td> <td class="plc vwthd"> <h1 class="ts"> <span id="thread_subject">7.6 重点回顾</span> </h1> <span class="xg1"> <a href="thread-2304-1-1.html" onclick="return copyThreadUrl(this, '职起网')" >[复制链接]</a></span> </td> </tr> </table> <table cellspacing="0" cellpadding="0" class="ad"> <tr> <td class="pls"> </td> <td class="plc"> </td> </tr> </table><div id="post_813" ><table id="pid813" class="plhin" summary="pid813" cellspacing="0" cellpadding="0"> <tr> <a name="lastpost"></a><td class="pls" rowspan="2"> <div id="favatar813" class="pls cl favatar"> <div class="pi"> <div class="authi"><a href="space-uid-1.html" target="_blank" class="xw1">职起网</a> </div> </div> <div class="p_pop blk bui card_gender_" id="userinfo813" style="display: none; margin-top: -11px;"> <div class="m z"> <div id="userinfo813_ma"></div> </div> <div class="i y"> <div> <strong><a href="space-uid-1.html" target="_blank" class="xi2">职起网</a></strong> <em>当前离线</em> </div><dl class="cl"> <dt>积分</dt><dd><a href="home.php?mod=space&uid=1&do=profile" target="_blank" class="xi2">4536</a></dd> </dl><div class="imicn"> <a href="home.php?mod=space&uid=1&do=profile" target="_blank" title="查看详细资料"><img src="static/image/common/userinfo.gif" alt="查看详细资料" /></a> </div> <div id="avatarfeed"><span id="threadsortswait"></span></div> </div> </div> <div> </div> </div> </td> <td class="plc"> <div class="pi"> <div class="pti"> <div class="pdbt"> </div> <div class="authi"> <img class="authicn vm" id="authicon813" src="static/image/common/online_admin.gif" /> <em id="authorposton813">发表于 2023-10-23 09:04</em> <span class="pipe">|</span> <a href="thread-2304-1-1.html" rel="nofollow">显示全部楼层</a> <span class="pipe show">|</span><a href="javascript:;" onclick="readmode($('thread_subject').innerHTML, 813);" class="show">阅读模式</a> </div> </div> </div><div class="pct"><style type="text/css">.pcb{margin-right:0}</style><div class="pcb"> <div class="typeoption"> <table summary="分类信息" cellpadding="0" cellspacing="0" class="cgtl mbm"> <caption>Linux</caption> <tbody><tr> <th>Linux 私房菜:</th> <td>服务器 » 二.主机的简易防火措施 » 7.网络安全与主机基本防护 </td> </tr> </tbody> </table> </div> <div class="t_fsz"><table cellspacing="0" cellpadding="0"> <tr> <td class="t_f" id="postmessage_813"> <font size="4"><strong>1、重点回顾</strong></font><br /> <ul><li>要管制登入服务器的来源主机，得要了解网络封包的特性，这主要包括 TCP/IP 的封包协议， 以及重要的 Socket Pair ，亦即来源与目标的 IP 与 port 等。在 TCP 封包方面，则还得了解 SYN/ACK 等封包状态；<li>网络封包要进入我们 Linux 本机，至少需要通过 (1)防火墙 (2)服务本身的管理 (3)SELinux (4)取得档案的 rwx 权限等步骤；<li>主机的基本保护之一，就是拥有正确的权限设定。而复杂的权限设定可以利用 ACL 或者是 SELinux 来辅助；<li>关闭 SELinux 可在 /etc/selinux/config 档案内设定，亦可在核心功能中加入 selinux=0 的项目；<li>rootkit 为一种取得 root 的工具组，你可以利用 rkhunter 来查询你主机是否被植入 rootkit；<li>网管人员应该注意在员工的教育训练还有主机的完善备份方案上面；<li>一些所谓的黑客软件，几乎都是透过你的 Linux 上面的软件漏洞来攻击 Linux 主机的；<li>软件升级是预防被入侵的最有效方法之一；<li>良好的登录档分析习惯可以在短时间内发现系统的漏洞，并加以修复。<br /> </ul><br /> <br /> <br /> <br /> <font size="4"><strong>2、课后练习</strong></font><br /> <ul><li>我老是发现我的系统怪怪的，似乎有点停顿的模样，怀疑可能是 CPU 负荷太大，所以要去检查一下系统相关的信息。请问，我该以什么指令去检查我的系统相关的信息？[jzsjiale_fold=答案]可以使用 top, sar, free, ps -aux, uptime, last 等功能去查询系统的相关信息喔！然后再以 kill 之类的指令删除；[/jzsjiale_fold]<li>我怀疑我的系统上面有过多的具有 SUID 的档案存在，导致一般使用者可以随意的取得 root 的权限，请问，我要如何找出这些具有 SUID 权限的档案？[jzsjiale_fold=答案]因为 SUID 是 4000 这个权限的模样，所以我可以这样做：<br /> find / -perm +4000[/jzsjiale_fold]<li>我由国内一些 ftp 网站上下载了 Red Hat 公司释出的软件，我想安装他，但又不知道该软件档案是否被修改过！ 请问我该如何确定这个软件的可用性？[jzsjiale_fold=答案]利用最简易的 MD5 编码来测试一下，例如『 md5sum 软件名称』，再比对与原始软件释出的 MD5 数据是否相同！？[/jzsjiale_fold]<li>如果我发现使用『 setfacl -m u:dmtsai:rwx /path/to/file 』时，系统却显示『setfacl: Operation not supported』， 你认为是哪里出问题？[jzsjiale_fold=答案]这是由于你的 filesystem 没有启用 ACL 支持，或者是系统的核心不支持。 请先使用 mount -o remount,acl /mount_point 测试看能否支持 ACL ，若不支持时，则可能是由于核心版本太旧了。[/jzsjiale_fold]<li>如果要设定 dmtsai 可以使用 /home/project 这个目录 (假设 /home 已经支持 ACL)，在该目录内 dmtsai 可以拥有完整的权限。请问该如何设定该目录？[jzsjiale_fold=答案]除了使用 setfacl -m u:dmtsai:rwx /home/project 之外，还需要设定 setfacl -m m:rwx /home/project ， 因为 ACL 在目录方面，必须透过用户权力及 mask 的逻辑运算后才能生效！[/jzsjiale_fold]<li>SELinux 是否为防火墙？[jzsjiale_fold=答案]SELinux 并非防火墙，他是用来作为更细部权限设定的一个核心模块。[/jzsjiale_fold]<li>良好的密码规划是防备主机的第一要务，请问 Linux 系统当中，关于密码相关的档案与规则设定在哪些档案里面？[jzsjiale_fold=答案]密码的设定规则在 /etc/login.defs 里面！至于密码档案在 /etc/shadow 内！[/jzsjiale_fold]<li>简易说明，当一部主机被入侵之后，应该如何处理？[jzsjiale_fold=答案]找出问题、重新安装、漏洞修补、数据还原！请参考本章最后一节的说明。[/jzsjiale_fold]<br /> </ul><br /> <br /> <br /> <br /> <font size="4"><strong>3、参考数据与延伸阅读</strong></font><br /> <ul><li>注1： nmap 的官方网站：<a href="http://insecure.org/nmap/" target="_blank">http://insecure.org/nmap/</a><li>Fedora 的 SELinux FAQ：<a href="http://fedora.redhat.com/docs/selinux-faq/" target="_blank">http://fedora.redhat.com/docs/selinux-faq/</a><li>SELinux 的发展网站：<a href="http://selinux.sourceforge.net/" target="_blank">http://selinux.sourceforge.net/</a><li>Red Hat 之 RHEL 4 的 SELinux 指南：<a href="http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/index.html" target="_blank">http://www.redhat.com/docs/manua ... ux-guide/index.html</a><li>美国国家安全局的 SELinux 简介：<a href="http://www.nsa.gov/selinux/" target="_blank">http://www.nsa.gov/selinux/</a><li>Rootkit hunter：<a href="http://www.rootkit.nl/projects/rootkit_hunter.html" target="_blank">http://www.rootkit.nl/projects/rootkit_hunter.html</a><br /> </ul><br /> <br /> <br /> <br /> </td> </tr> </table> </div> <div id="comment_813" class="cm"> </div> <div id="post_rate_div_813"></div> </div> </div> </td></tr> <tr><td class="plc plm"> </td> </tr> <tr id="_postposition813"></tr> <tr> <td class="pls"></td> <td class="plc" style="overflow:visible;"> <div class="po hin"> <div class="pob cl"> <em> <a class="fastre" href="forum.php?mod=post&action=reply&fid=59&tid=2304&reppost=813&extra=page%3D1&page=1" onclick="showWindow('reply', this.href)">回复</a> </em> <p> <a href="javascript:;" onclick="showWindow('miscreport813', 'misc.php?mod=report&rtype=post&rid=813&tid=2304&fid=59', 'get', -1);return false;">举报</a> </p> </div> </div> </td> </tr> <tr class="ad"> <td class="pls"> </td> <td class="plc"> </td> </tr> </table> </div><div id="postlistreply" class="pl"><div id="post_new" class="viewthread_table" style="display: none"></div></div> </div> <form method="post" autocomplete="off" name="modactions" id="modactions"> <input type="hidden" name="formhash" value="8358a52e" /> <input type="hidden" name="optgroup" /> <input type="hidden" name="operation" /> <input type="hidden" name="listextra" value="page%3D1" /> <input type="hidden" name="page" value="1" /> </form> <div class="pgs mtm mbm cl"> <span class="pgb y"><a href="forum-59-1.html">返回列表</a></span> <a id="newspecialtmp" onmouseover="$('newspecial').id = 'newspecialtmp';this.id = 'newspecial';showMenu({'ctrlid':this.id})" onclick="location.href='forum.php?mod=post&action=newthread&fid=59';return false;" href="javascript:;" title="发新帖" class="pgsbtn showmenu">发新帖</a> </div> <!--[diy=diyfastposttop]--><div id="diyfastposttop" class="area"></div><!--[/diy]--> </div> <div class="wp mtn"> <!--[diy=diy3]--><div id="diy3" class="area"></div><!--[/diy]--> </div> <script type="text/javascript"> function succeedhandle_followmod(url, msg, values) { var fObj = $('followmod_'+values['fuid']); if(values['type'] == 'add') { fObj.innerHTML = '不关注'; fObj.href = 'home.php?mod=spacecp&ac=follow&op=del&fuid='+values['fuid']; } else if(values['type'] == 'del') { fObj.innerHTML = '关注TA'; fObj.href = 'home.php?mod=spacecp&ac=follow&op=add&hash=8358a52e&fuid='+values['fuid']; } } fixed_avatar([813], 1); </script> </div> <div class="dz_footc cl"> <div id="ft" class="wp dz_footc_bottom cl"> <div class="dz_footc_dico"> <div class="ewmimg"> <img src="template/discuzx5/static/images/ewm_a.jpg"> 关注公众号</div> </div> <div class="dz_footc_nav"><a href="/forum.php?mod=viewthread&tid=1789&extra=page%3D1" >一起创作</a><span class="pipe">|</span><a href="#" >站长QQ:2674615</a><span class="pipe">|</span><a href="http://www.zhiqimba.com/" rel="nofollow" target="_blank">ZHIQI</a> <script> var _hmt = _hmt || []; (function() { var hm = document.createElement("script"); hm.src = "https://hm.baidu.com/hm.js?fe20a7cd150e593a05a74b380cf8e7cc"; var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hm, s); })(); </script> </div> <div class="dz_footc_copy"> <p>相关侵权、举报、投诉及建议等，请发 E-mail：admin@discuz.vip</p> <p>Powered by <strong><a href="https://www.discuz.vip/" target="_blank">Discuz!</a></strong> <em>X5.0</em> © 2001-2026 <a href="https://code.dismall.com/" target="_blank">Discuz! Team</a>.<span class="pipe">|</span><a href="https://beian.miit.gov.cn/" target="_blank">闽ICP备17031337号-15</a></p> </div> </div> </div> <div class="dz_rnav" id="dz_rnav"> <a href="forum.php?mod=post&action=newthread&fid=59" class="dz_rpost" rel="nofollow"><span class="dz_tip_text">在本版发帖</span></a><a href="javascript:;" class="dz_rwx" rel="nofollow"> <div class="dz_rewm_box"> <div class="dz_rewm"> <img src="template/discuzx5/static/images/wechat.jpg"> <span>关注公众号</span> </div> </div> </a> <a href="javascript:;" onclick="jQuery('body,html').animate({scrollTop:0}, 600);" title="返回顶部" id="dz_rtop" class="dz_rtop" rel="nofollow"><span class="dz_tip_text">返回顶部</span></a> </div> <div id="scrolltop" style="display: none;"> <span><a href="forum.php?mod=post&action=reply&fid=59&tid=2304&extra=page%3D1&page=1" onclick="showWindow('reply', this.href)" class="replyfast" title="快速回复"><b>快速回复</b></a></span> <span hidefocus="true"><a title="返回顶部" onclick="window.scrollTo('0','0')" class="scrolltopa" ><b>返回顶部</b></a></span> <span> <a href="forum-59-1.html" hidefocus="true" class="returnlist" title="返回列表"><b>返回列表</b></a> </span> </div> <script type="text/javascript">_attachEvent(window, 'scroll', function () { new_showTopLink(); }); _attachEvent(window, 'resize', function(){ new_showTopLink(); });checkBlind();</script> <script type="text/javascript"> function new_showTopLink() { var ft = $('ft'); if(ft){ var dzscrolltop = $('dz_rnav'); var viewPortHeight = parseInt(document.documentElement.clientHeight); var dzscrollHeight = parseInt(document.body.getBoundingClientRect().top); var dzbasew = parseInt(ft.clientWidth); var dzsw = dzscrolltop.clientWidth; if (dzbasew < 1500) { var left = parseInt(fetchOffset(ft)['left']); left = left < dzsw ? left * 2 - dzsw : left; dzscrolltop.style.left = ( dzbasew + left ) + 'px'; } else { dzscrolltop.style.left = 'auto'; dzscrolltop.style.right = 0; } console.log(dzscrollHeight); if (dzscrollHeight < -100) { jQuery(".dz_rtop").slideDown(); } else { jQuery(".dz_rtop").slideUp(); } } } new_showTopLink(); function show_win(on) { showMenu({ 'ctrlid': "win_"+on+"_div", 'menuid': "win_"+on+"_box", 'duration': 3, 'pos': '00', 'cover': 1, 'drag': "win_"+on+"_move", 'maxh': '' }); } </script> <script src="home.php?mod=misc&ac=sendmail&rand=1787559083" type="text/javascript"></script> <script type="text/javascript">_attachEvent(window, 'scroll', function () { showTopLink(); });checkBlind();</script> </body> </html>