WORK3
第三周
1、统计出/etc/passwd文件中其默认shell为非/sbin/nologin的用户个数,并将用户都显示出来
[root@srehost jin]#cat /etc/passwd | grep -E "\/sbin\/nologin$"| egrep -o "(.*):x" | egrep -o "[^:x]*"
bin
daemon
adm
lp
mail
operator
games
ftp
nobody
dbus
systemd-coredump
systemd-resolve
tss
polkitd
geoclue
rtkit
pipewire
pulse
qemu
usbmu
d
unbound
gluster
rpc
avahi
chrony
saslauth
libstoragemgmt
dnsmasq
radvd
sssd
cockpit-ws
cockpit-wsinstance
colord
rpcuser
setroubleshoot
flatpak
gdm
clevis
gnome-initial-setup
tcpdump
sshd
radiusd
postfi
slackware
apache
nologin
[root@srehost jin]#cat /etc/passwd | grep -E "nologin$"| wc -l
46
[root@srehost jin]#cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
systemd-coredump:x:999:997:systemd Core Dumper:/:/sbin/nologin
systemd-resolve:x:193:193:systemd Resolver:/:/sbin/nologin
tss:x:59:59:Account used for TPM access:/dev/null:/sbin/nologin
polkitd:x:998:996:User for polkitd:/:/sbin/nologin
geoclue:x:997:995:User for geoclue:/var/lib/geoclue:/sbin/nologin
rtkit:x:172:172:RealtimeKit:/proc:/sbin/nologin
pipewire:x:996:992:PipeWire System Daemon:/var/run/pipewire:/sbin/nologin
pulse:x:171:171:PulseAudio System Daemon:/var/run/pulse:/sbin/nologin
qemu:x:107:107:qemu user:/:/sbin/nologin
usbmuxd:x:113:113:usbmuxd user:/:/sbin/nologin
unbound:x:995:989:Unbound DNS resolver:/etc/unbound:/sbin/nologin
gluster:x:994:988:GlusterFS daemons:/run/gluster:/sbin/nologin
rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
avahi:x:70:70:Avahi mDNS/DNS-SD Stack:/var/run/avahi-daemon:/sbin/nologin
chrony:x:993:987::/var/lib/chrony:/sbin/nologin
saslauth:x:992:76:Saslauthd user:/run/saslauthd:/sbin/nologin
libstoragemgmt:x:991:985:daemon account for libstoragemgmt:/var/run/lsm:/sbin/nologin
dnsmasq:x:983:983:Dnsmasq DHCP and DNS server:/var/lib/dnsmasq:/sbin/nologin
radvd:x:75:75:radvd user:/:/sbin/nologin
sssd:x:982:982:User for sssd:/:/sbin/nologin
cockpit-ws:x:981:981:User for cockpit web service:/nonexisting:/sbin/nologin
cockpit-wsinstance:x:980:980:User for cockpit-ws instances:/nonexisting:/sbin/nologin
colord:x:979:979:User for colord:/var/lib/colord:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
setroubleshoot:x:978:978::/var/lib/setroubleshoot:/sbin/nologin
flatpak:x:977:977:User for flatpak system helper:/:/sbin/nologin
gdm:x:42:42::/var/lib/gdm:/sbin/nologin
clevis:x:976:976:Clevis Decryption Framework unprivileged user:/var/cache/clevis:/sbin/nologin
gnome-initial-setup:x:975:975::/run/gnome-initial-setup/:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
jin:x:1000:1000:jin:/home/jin:/bin/bash
radiusd:x:95:95:radiusd user:/var/lib/radiusd:/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/sbin/nologin
mageia:x:1100:1100::/home/linux/:/bin/bash
slackware:x:2002:2019::/home/slackware:/sbin/nologin
user1:x:2003:2003::/home/user1:/bin/bash
user2:x:2004:2004::/home/user2:/bin/bash
user3:x:2005:2005::/home/user3:/bin/bash
apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin
bash:x:2006:2006::/home/bash:/bin/bash
sh:x:2007:2007::/home/sh:/bin/bash
basher:x:2008:2008::/home/basher:/bin/bash
testbash:x:2009:2009::/home/testbash:/bin/bash
nologin:x:2010:2010::/home/nologin:/sbin/nologin
2、查出用户UID最大值的用户名、UID及shell类型
[root@srehost jin]#cat /etc/passwd| cut -d : -f 1,3,7| sort -t ":" -k2 -n -r
nobody:65534:/sbin/nologin
nologin:2010:/sbin/nologin
testbash:2009:/bin/bash
basher:2008:/bin/bash
sh:2007:/bin/bash
bash:2006:/bin/bash
user3:2005:/bin/bash
user2:2004:/bin/bash
user1:2003:/bin/bash
slackware:2002:/sbin/nologin
mageia:1100:/bin/bash
jin:1000:/bin/bash
systemd-coredump:999:/sbin/nologin
polkitd:998:/sbin/nologin
geoclue:997:/sbin/nologin
pipewire:996:/sbin/nologin
unbound:995:/sbin/nologin
gluster:994:/sbin/nologin
chrony:993:/sbin/nologin
saslauth:992:/sbin/nologin
libstoragemgmt:991:/sbin/nologin
dnsmasq:983:/sbin/nologin
sssd:982:/sbin/nologin
cockpit-ws:981:/sbin/nologin
cockpit-wsinstance:980:/sbin/nologin
colord:979:/sbin/nologin
setroubleshoot:978:/sbin/nologin
flatpak:977:/sbin/nologin
clevis:976:/sbin/nologin
gnome-initial-setup:975:/sbin/nologin
systemd-resolve:193:/sbin/nologin
rtkit:172:/sbin/nologin
pulse:171:/sbin/nologin
usbmuxd:113:/sbin/nologin
qemu:107:/sbin/nologin
radiusd:95:/sbin/nologin
postfix:89:/sbin/nologin
dbus:81:/sbin/nologin
radvd:75:/sbin/nologin
sshd:74:/sbin/nologin
tcpdump:72:/sbin/nologin
avahi:70:/sbin/nologin
tss:59:/sbin/nologin
apache:48:/sbin/nologin
gdm:42:/sbin/nologin
rpc:32:/sbin/nologin
rpcuser:29:/sbin/nologin
ftp:14:/sbin/nologin
games:12:/sbin/nologin
operator:11:/sbin/nologin
mail:8:/sbin/nologin
halt:7:/sbin/halt
shutdown:6:/sbin/shutdown
sync:5:/bin/sync
lp:4:/sbin/nologin
adm:3:/sbin/nologin
daemon:2:/sbin/nologin
bin:1:/sbin/nologin
root:0:/bin/bash
3、统计当前连接本机的每个远程主机IP的连接数,并按从大到小排序
(生产环境打印日志,因为虚拟机压根没啥链接看不到效果)
[root@srehost jin]#cat ss.log | grep -i -v "state" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}\]:[0-9]+[[:space:]]*$"| grep -o -E "([0-9]{1,3}\.){3}[0-9]{1,3}"| sort| uniq -c| sort -nr
1030 192.168.100.110
73 127.0.0.1
4 116.147.12.123
3 116.147.12.76
3 116.147.12.65
3 116.147.12.61
3 116.147.12.44
3 116.147.12.38
3 116.147.12.29
3 116.147.12.251
3 116.147.12.246
3 116.147.12.20
3 116.147.12.187
3 116.147.12.155
3 116.147.12.149
3 116.147.11.95
3 116.147.11.253
3 116.147.11.250
3 116.147.11.217
3 116.147.11.206
3 116.147.11.184
3 116.147.11.158
3 116.147.11.154
3 116.147.11.141
3 116.147.11.107
3 116.147.11.0
2 117.136.7.84
2 116.147.12.9
2 116.147.12.69
2 116.147.12.244
2 116.147.12.209
2 116.147.12.203
2 116.147.12.199
2 116.147.12.19
2 116.147.12.177
2 116.147.12.12
2 116.147.12.104
2 116.147.12.103
2 116.147.11.52
2 116.147.11.31
2 116.147.11.192
2 116.147.11.185
2 116.147.11.181
2 116.147.11.157
2 116.147.11.153
2 116.147.11.151
2 116.147.11.146
2 116.147.11.14
2 116.147.11.12
2 116.147.11.114
2 116.147.11.112
1 62.233.50.179
1 116.147.12.78
[root@srehost jin]#
4、编写脚本disk.sh,显示当前硬盘分区中空间利用率最大的值
[root@srehost jin]#df -h| grep -E "[0-9]+%"
devtmpfs 3.8G 0 3.8G 0% /dev
tmpfs 3.8G 0 3.8G 0% /dev/shm
tmpfs 3.8G 9.6M 3.8G 1% /run
tmpfs 3.8G 0 3.8G 0% /sys/fs/cgroup
/dev/mapper/cl-root 48G 4.9G 43G 11% /
/dev/mapper/cl-home 24G 11G 14G 44% /home
/dev/sda1 1014M 259M 756M 26% /boot
tmpfs 775M 12K 775M 1% /run/user/42
/dev/loop0 11G 11G 0 100% /mnt/cdrom
tmpfs 775M 0 775M 0% /run/user/0
[root@srehost jin]#df -h| grep -E -o "[0-9]+% \/.*"| egrep "[^%]" | tr "%" " " | tr -s ' ' | sort -t ' ' -k1 -n -r
100 /mnt/cdrom
44 /home
26 /boot
11 /
1 /run/user/42
1 /run
0 /sys/fs/cgroup
0 /run/user/0
0 /dev/shm
0 /dev
5、编写脚本 systeminfo.sh,显示当前主机系统信息,包括:主机名,IPv4地址,操作系统版本,内核版本,CPU型号,内存大小,硬盘大小
echo "硬盘大小为:$(lsblk | grep -v -i "name" | egrep "^sd.*" | tr -s ' ' | cut -d ' ' -f4)"
echo "内存大小为: $(free -m| grep -i "^MEM" | egrep -o ": *[0-9]+ "| grep -E -o "[0-9]+")M"
echo "内核版本为: $(uname -r)"
echo "操作系统版本为: $(cat /etc/redhat-release)"
echo "IPV4地址为 : $(cat /etc/sysconfig/network-scripts/ifcfg-ens33 | egrep "^IPADDR.*([0-9]+.){3}([0-9]+)" | egrep -o "([0-9]+.){3}([0-9]+)")"
echo "主机名为: `hostname`"
[root@srehost jin]#sh sysinfo.sh
硬盘大小为:80G
内存大小为: 7741M
内核版本为: 4.18.0-348.el8.x86_64
操作系统版本为: CentOS Linux release 8.5.2111
IPV4地址为 : 192.168.81.11
主机名为: srehost
[root@srehost jin]#cat sysinfo.sh
#!/bin/bash
echo "硬盘大小为:$(lsblk | grep -v -i "name" | egrep "^sd.*" | tr -s ' ' | cut -d ' ' -f4)"
echo "内存大小为: $(free -m| grep -i "^MEM" | egrep -o ": *[0-9]+ "| grep -E -o "[0-9]+")M"
echo "内核版本为: $(uname -r)"
echo "操作系统版本为: $(cat /etc/redhat-release)"
echo "IPV4地址为 : $(cat /etc/sysconfig/network-scripts/ifcfg-ens33 | egrep "^IPADDR.*([0-9]+.){3}([0-9]+)" | egrep -o "([0-9]+.){3}([0-9]+)")"
echo "主机名为: `hostname`"
[root@srehost jin]#
6、20分钟内通关vimtutor(可参考https://yyqing.me/post/2017/2017-02-22-vimtutor-chinese-summary)
浙公网安备 33010602011771号