Shulou(Shulou.com)06/01 Report--

find command secure program and ncheck command is like this, many novices are not very clear about this, in order to help you solve this problem, the following small series will explain in detail for everyone, there are people who need this can learn, I hope you can gain something.

Discuss security issues from a system administrator's perspective. A system administrator is a person who manages a system: starting it up, stopping it, installing new software, adding new users, deleting old users, and performing routine tasks to keep it up and running.

(1)Autoconf on find command

The find command searches the directory tree and performs an operation on all files in the directory tree. The parameters are a list of directory names (indicating where to start searching) and one or more options specifying what to do with each file.

find . -print lists every file in the directory tree in the current working directory.

find / -user bob -print lists all files belonging to bob users that can be found in the system.

find /usr/bob -perm 666 -print will list all files in the/usr/bob directory tree with access permission 666. Changing 666 to-666 will list all files with access permissions that include 666 (e.g. 777).

find /usr/bob -type b -print lists all block special files (c for character special files) in the/usr/bob directory tree.

find / -user root -perm -4000 -exec ls -l {} ; is a slightly more complex command,-exec COMMAND ; allows the specified command COMMAND to be run for each file found. If COMMAND contains {},{} will be replaced by the filename found by find.COMMAND must end with;.

The usage of find. Options can be combined for greater functionality.

(2)Autoconf about secure program

The system administrator should have a program to check the system files periodically, including checking the device files and SUID and SGID programs, especially SUID and SGID programs, checking the/etc/passwd and/etc/group files, looking for long-lost accounts, and verifying that important files have not been modified. (Source list will be published in the future)

(3)Autoconf on ncheck command

Used to check the file system, only a disk partition name as a parameter, will list the i node number and the corresponding file name.i node the same file as the chain file.

Note: The first part of the file name listed in the list that is the same as the *** field of the mount command will not be listed. Because it is doing a file system internal check,ncheck does not know the directories above the file system mount point.

This command can also be used to search all SUID and SGID program and device files in the file system, using the-s option to do this.

Did reading the above help you? If you still want to have further understanding of related knowledge or read more related articles, please pay attention to the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.