#20170804 查看正在访问某文件/目录进程####################################### fuser /path/to/file(dir) sudoers####################################### # cat /etc/sudoers.d/usr01 Cmnd_Alias DENYCMD = !/usr/bin/passwd,!/usr/bin/passwd root,!/bin/vi /etc/sudoers,!/usr/bin/vim /etc/sudoers,!/usr/sbin/visudo,!/bin/vi /etc/ssh/*,!/usr/bin/vim /etc/ssh/*, !/bin/chmod 777 /etc/*,!/bin/chmod 777 *,!/bin/chmod 777,!/bin/chmod -R 777 * Cmnd_Alias DENYRMCMD = !/bin/rm /*,!/bin/rm /,!/bin/rm -rf /,!/bin/rm -rf /*,!/bin/rm /etc,!/bin/rm -r /etc,!/bin/rm -rf /etc,!/bin/rm /etc/*,!/bin/rm -r /etc/*,!/bin/rm -rf /etc/*,!/bin/rm /root,!/bin/rm -r /root,!/bin/rm -rf /root,!/bin/rm /root/*,!/bin/rm -r /root/*,!/bin/rm -rf /root/*,!/bin/rm /bin,!/bin/rm -r /bin,!/bin/rm -rf /bin,!/bin/rm /bin/*,!/bin/rm -r /bin/*,!/bin/rm -rf /bin/* Cmnd_Alias DENYSUDOI = !/usr/bin/sudo -i,!/bin/su *root*,!/bin/bash,!/bin/sh,!/bin/tcsh usr01 ALL=(ALL) NOPASSWD: ALL,DENYCMD,DENYRMCMD,SUDOI sudo命令白名单 Cmnd_Alias PERMIT = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool, /bin/rpm,/usr/bin/up2date, /usr/bin/yum, /sbin/service, /sbin/chkconfig, /sbin/fdisk, /sbin/sfdisk,/sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount, /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall Cmnd_Alias SU = /bin/su,!/bin/su *root* Cmnd_Alias CHMOD = !/bin/chmod 777 *,!/bin/chmod -R 777 * Cmnd_Alias RM = !/bin/rm /*,!/bin/rm /,!/bin/rm -rf /,!/bin/rm -rf /*,!/bin/rm /etc,!/bin/rm -r /etc,!/bin/rm -rf /etc,!/bin/rm /etc/*,!/bin/rm -r /etc/*,!/bin/rm -rf /etc/*,!/bin/rm /root,!/bin/rm -r /root,!/bin/rm -rf /root,!/bin/rm /root/*,!/bin/rm -r /root/*,!/bin/rm -rf /root/*,!/bin/rm /bin,!/bin/rm -r /bin,!/bin/rm -rf /bin,!/bin/rm /bin/*,!/bin/rm -r /bin/*,!/bin/rm -rf /bin/* bmdba ALL=(ALL) NOPASSWD: PERMIT,SU,CHMOD,RM sudo命令黑名单 Cmnd_Alias DENYSUROOT = !/bin/bash,!/bin/sh,!/bin/tcsh,!/usr/sbin/visudo,!/bin/su *root* Cmnd_Alias DENYVI = !/usr/bin/vim,!/bin/vi,!/bin/echo Cmnd_Alias DENYCMD = !/usr/bin/passwd,!/usr/bin/passwd root,!/bin/chmod 777 /etc/*,!/bin/chmod 777,!/bin/chmod 777 *,!/bin/chmod -R 777 * Cmnd_Alias DENYRMCMD = !/bin/rm /*,!/bin/rm /,!/bin/rm -rf /,!/bin/rm -rf /*,!/bin/rm /etc,!/bin/rm -r /etc,!/bin/rm -rf /etc,!/bin/rm /etc/*,!/bin/rm -r /etc/*,!/bin/rm -rf /etc/*,!/bin/rm /root,!/bin/rm -r /root,!/bin/rm -rf /root,!/bin/rm /root/*,!/bin/rm -r /root/*,!/bin/rm -rf /root/*,!/bin/rm /bin,!/bin/rm -r /bin,!/bin/rm -rf /bin,!/bin/rm /bin/*,!/bin/rm -r /bin/*,!/bin/rm -rf /bin/* linux获取自己的外网IP####################################### curl ifconfig.me curl icanhazip.com curl ident.me curl ipecho.net/plain curl whatismyip.akamai.com curl myip.dnsomatic.com curl https://ip.3322.net disk io 测试####################################### 磁盘写速度测试: # sync;/usr/bin/time -p bash -c "(dd if=/dev/zero of=test.dd bs=1M count=20000)" 20000+0 records in 20000+0 records out 20971520000 bytes (21 GB) copied, 185.653 s, 113 MB/s real 185.66 user 0.01 sys 20.99 腾讯云cfs写速度 # sync;/usr/bin/time -p bash -c "(dd if=/dev/zero of=/tx_cfs/test.dd bs=1M count=20000)" 20000+0 records in 20000+0 records out 20971520000 bytes (21 GB) copied, 436.983 s, 48.0 MB/s real 436.98 user 0.01 sys 11.98 磁盘读速度测试: # echo 3 > /proc/sys/vm/drop_caches && /usr/bin/time -p dd if=test.dd of=/dev/null bs=1M 20000+0 records in 20000+0 records out 20971520000 bytes (21 GB) copied, 224.633 s, 93.4 MB/s real 224.76 user 0.06 sys 11.75 腾讯云cfs读速度 echo 3 > /proc/sys/vm/drop_caches && /usr/bin/time -p dd if=/tx_cfs/test.dd of=/dev/null bs=1M 20000+0 records in 20000+0 records out 20971520000 bytes (21 GB) copied, 278.183 s, 75.4 MB/s real 278.29 user 0.05 sys 8.82 awk []就是分隔符####################################### # cat /sys/kernel/mm/transparent_hugepage/enabled [always] madvise never [#20170804 查看正在访问某文件/目录进程##############