Chapter04

?1、创建/guanli 目录，在/guanli下创建zonghe 和 jishu 两个目录（一条命令）
[[email?protected] ~]#
[[email?protected] ~]# mkdir -pv /guanli/zonghe | mkdir -pv /guanli/jishu
mkdir: 已创建目录 "/guanli"
mkdir: 已创建目录 "/guanli/jishu"
[[email?protected] ~]# cd /guanli/
[[email?protected] guanli]# ls
jishu? zonghe
[[email?protected] guanli]#
2、添加组帐号zonghe、caiwu、jishu，GID号分别设置为2001、2002、2003
[[email?protected] ~]# groupadd -g 2001 zonghe | groupadd -g 2002 caiwu | groupadd -g 2003 jishu
[[email?protected] ~]# tail -8 /etc/group
jiaoxue:x:1002:
ss:x:1003:
test1:x:1004:
test2:x:1005:
test3:x:1006:
jishu:x:2003:
caiwu:x:2002:
zonghe:x:2001:
3、创建jerry、kylin、tsengia、obama用户，其中的kylin用户帐号在2020年12月30日后失效
[[email?protected] ~]# useradd jerry | useradd kylin | useradd tsengia | useradd obama
[[email?protected] ~]# usermod -e 2020-12-30 kylin
[[email?protected] ~]# tail -3 /etc/shadow
kylin:!!:18107:0:99999:7::18626:
4、将jerry、kylin、tsengia、obama等用户添加到zonghe组内
[[email?protected] ~]# gpasswd -M jerry,kylin,tsengia,obama zonghe
[[email?protected] ~]# tail -4 /etc/group
tsegia:x:1004:
zonghe:x:2001:jerry,obama
caiwu:x:2002:
jishu:x:2003:
[[email?protected] ~]#
5、创建handy、cucci用户，其中cucci帐号的登录Shell设置为“/sbin/nologin”
[[email?protected] ~]# useradd handy
[[email?protected] ~]# useradd -s /sbin/nologin cucci
[[email?protected] ~]# tail -2 /etc/passwd
handy:x:1005:1005::/home/handy:/bin/bash
cucci:x:1006:1006::/home/cucci:/sbin/nologin
6、将handy、cucci等用户添加到jishu组内
[[email?protected] ~]#
[[email?protected] ~]# gpasswd -M handy,cucci jishu
[[email?protected] ~]# tail -8 /etc/group
kylin:x:1002:
jerry:x:1003:
tsegia:x:1004:
zonghe:x:2001:jerry,tsegia,obama
caiwu:x:2002:
jishu:x:2003:handy,cucci
handy:x:1005:
cucci:x:1006:
7、将上述的所有用户均要求加入到guanli组内
[[email?protected] ~]# gpasswd -M handy,cucci,jerry,obama guanli
[[email?protected] ~]# tail /etc/group
guanli:x:2004:handy,obama
8、将zonghe组内的obama用户删除
[[email?protected] ~]# vi /etc/group
zonghe:x:2001:jerry,tsegia
9、为jerry用户设置密码为“123456”（使用普通方法）
?? 为cucci用户设置密码为“redhat”（使用--stdin方法）?
[[email?protected] ~]# passwd jerry
更改用户 jerry 的密码 。
新的 密码：
无效的密码： 密码少于 8 个字符
重新输入新的 密码：
passwd：所有的身份验证令牌已经成功更新。
[[email?protected] ~]# echo "redhat" | passwd --stdin cucci
更改用户 cucci 的密码 。
passwd：所有的身份验证令牌已经成功更新。
10、将jerry用户锁定，并查看锁定状态
[[email?protected] ~]# passwd -l jerry
锁定用户 jerry 的密码 。
passwd: 操作成功
[[email?protected] ~]# passwd -S jerry
jerry LK 2019-07-30 0 99999 7 -1 (密码已被锁定。)
11、打开两个xshell窗口，通过（who 或者 w）命令查看连接状态，并通过fuser杀掉其中一个
[[email?protected] ~]# who
root???? :0?????????? 2019-07-30 15:39 (:0)
root???? pts/0??????? 2019-07-30 15:39 (:0)
root???? pts/1??????? 2019-07-30 15:41 (192.168.100.126)
root???? pts/2??????? 2019-07-30 16:06 (192.168.100.126)
[[email?protected] ~]# fuser -k /dev/pts/2
/dev/pts/2:?????????? 9780
[[email?protected] ~]#
12、查看cucci用户，属于那些组，并查看其详细信息
[[email?protected] ~]# groups cucci
cucci : cucci jishu guanli
[[email?protected] ~]# finger cucci
Login: cucci????????? ???Name:
Directory: /home/cucci????????????? ?Shell: /sbin/nologin
Never logged in.
No mail.
No Plan.
[[email?protected] ~]# finger
Login???? Name?????? Tty????? Idle? Login Time?? Office???? Office Phone?? Host
root????? root????? *:0???????????? Jul 30 15:39?????????????????????????? (:0)
root????? root?????? pts/0????? 33? Jul 30 15:39?????????????????????????? (:0)
root????? root?????? pts/1????????? Jul 30 15:41?????????????????????????? (192.168.100.126)
13、手工创建账号student

? [[email?protected] ~]# vi /etc/group
最后一行加入student:x:2000:保存并退出
[[email?protected] ~]# vi /etc/passwd
最后一行加入student:x:2001:2000::/home/student:/bin/bash保存并退出
[[email?protected] ~]# vi /etc/shadow
进入后使用yyp这一行复制到最后并进行改编cucci:!!$6$Jo7ZqnHk$rVpYu8/3xvNIkqDpEViNEnir4hki2vVVS/gotNPEGvr2PbafNX65N7anoXnslTzvyaBmmWdIPmEHov2JWS7Sn/:18107:0:99999:7:::
student:$6$Jo7ZqnHk$rVpYu8/3xvNIkqDpEViNEnir4hki2vVVS/gotNPEGvr2PbafNX65N7anoXnslTzvyaBmmWdIPmEHov2JWS7Sn/:18107:0:99999:7:::
[[email?protected] ~]# mkdir -pv /home/student
mkdir: 已创建目录 "/home/student"
[[email?protected] ~]# cp -R /etc/skel/ /home/student/
[[email?protected] ~]# chown -R student:student /home/student
[[email?protected] ~]# chmod -R go= /home/student、
[[email?protected] ~]# su student
bash-4.2$ exit
[[email?protected] ~]# cp /etc/skel/.bashrc /home/student/
[[email?protected] ~]# cp /etc/skel/.bash_logout /home/student/
[[email?protected] ~]# cp /etc/skel/.bash_profile /home/student/
[[email?protected] ~]# su student
[[email?protected] root]$ su

14、设置权限及归属：
?? /guanli目录属组设为guanli
?? /guanli/zonghe目录的属组设为zonghe
?? /guanli/jishu目录的属组设为jishu
?? 设置3个目录都是禁止其他用户访问的权限
[[email?protected] ~]# chown :guanli /guanli/
[[email?protected] ~]# chown :zonghe /guanli/zonghe
[[email?protected] ~]# chown :jishu /guanli/jishu
[[email?protected] ~]# chmod -R o=--- /guanli
[[email?protected] ~]# ll /guanli/
总用量 0
drwxr-x---. 2 root jishu? 6 7月? 30 16:46 jishu
drwxr-x---. 2 root zonghe 6 7月? 30 16:46 zonghe
15、建立公共目录/ceshi
?? 允许技术组内的所有用户读取、写入、执行文件
?? 禁止其他用户读、写、执行
[[email?protected] ~]# mkdir /ceshi
[[email?protected] ~]# chown :jishu /ceshi
[[email?protected] ~]# chmod g=xwr /ceshi
[[email?protected] ~]# chmod o=--- /ceshi
[[email?protected] ~]# ls -l /
总用量 28
lrwxrwxrwx.?? 1 root root???? 7 7月? 29 09:24 bin -> usr/bin
dr-xr-xr-x.?? 5 root root? 4096 7月? 29 09:34 boot
drwxrwx---.?? 2 root jishu??? 6 7月? 30 17:34 ceshi??

16、清除jerry用户密码
[[email?protected] ~]# passwd -S jerry
jerry LK 2019-07-30 0 99999 7 -1 (密码已被锁定。)
[[email?protected] ~]# passwd -u jerry
解锁用户 jerry 的密码。
17、锁定cucci用户密码并查看状态
[[email?protected] ~]# passwd -l cucci
锁定用户 cucci 的密码 。
passwd: 操作成功
[[email?protected] ~]# passwd -S cucci
cucci LK 2019-07-30 0 99999 7 -1 (密码已被锁定。)
18、修改obama用户的UID为8888

[[email?protected] ~]# groupadd -g 8888 obama
[[email?protected] ~]# tail -9 /etc/group
kylin:x:1002:
jerry:x:1003:
tsegia:x:1004:
zonghe:x:2001:jerry,tsegia
caiwu:x:2002:
jishu:x:2003:handy,cucci
handy:x:1005:
cucci:x:1006:
obama:x:8888:

19、通过passwd命令修改kylin用户的最长密码使用期限为60天
[[email?protected] ~]# passwd -x 60 kylin
调整用户密码老化数据kylin。
passwd: 操作成功
[[email?protected] ~]# tail /etc/shadow
kylin:!!:18107:0:60:7::18626:
20、通过id groups finger等命令查看用户handy信息
[[email?protected] ~]# id handy
uid=1005(handy) gid=1005(handy) 组=1005(handy),2003(jishu)
[[email?protected] ~]# groups handy
handy : handy jishu
[[email?protected] ~]# finger handy
Login: handy????????? ???Name:
Directory: /home/handy????????????? ?Shell: /bin/bash
Never logged in.
No mail.
No Plan.
[[email?protected] ~]#