{"id":305,"date":"2024-04-01T18:49:17","date_gmt":"2024-04-01T10:49:17","guid":{"rendered":"http:\/\/blue.yn.cn\/?p=305"},"modified":"2024-12-08T11:03:25","modified_gmt":"2024-12-08T03:03:25","slug":"%e6%9d%83%e9%99%90%e7%ae%a1%e7%90%86","status":"publish","type":"post","link":"http:\/\/blue.yn.cn\/?p=305","title":{"rendered":"\u6743\u9650\u7ba1\u7406"},"content":{"rendered":"<h3>\u6587\u4ef6\u6743\u9650\u4ecb\u7ecd<\/h3>\n<h4>\u4ec0\u4e48\u662f\u6743\u9650<\/h4>\n<ul>\n<li>\u6743\u9650\u662f\u7528\u6765\u7ea6\u675f\u7528\u6237\u80fd\u5bf9\u7cfb\u7edf\u6240\u505a\u7684\u64cd\u4f5c<\/li>\n<li>\u6216\u8005\u8bf4\uff0c\u6743\u9650\u662f\u67d0\u4e2a\u6307\u5b9a\u7684\u7528\u6237\u5177\u6709\u7279\u5b9a\u7684\u7cfb\u7edf\u8d44\u6e90\u4f7f\u7528\u6743\u529b<\/li>\n<\/ul>\n<h4>\u4e3a\u4ec0\u4e48\u9700\u8981\u6743\u9650<\/h4>\n<ul>\n<li><code>linux<\/code>\u662f\u4e00\u4e2a\u591a\u7528\u6237\u7cfb\u7edf\uff0c\u5bf9\u4e8e\u6bcf\u4e00\u4e2a\u7528\u6237\u6765\u8bf4\uff0c\u4e2a\u4eba\u9690\u79c1\u7684\u4fdd\u62a4\u5341\u5206\u91cd\u8981\uff0c\u6240\u4ee5\u9700\u8981\u8fdb\u884c\u6743\u9650\u5212\u5206\n<ul>\n<li>\u5b89\u5168\u6027\uff1a\u964d\u4f4e\u8bef\u5220\u9664\u98ce\u9669\u3001\u51cf\u5c11\u4eba\u4e3a\u9020\u6210\u6545\u969c\u4ee5\u53ca\u6570\u636e\u6cc4\u9732\u7b49\u98ce\u9669<\/li>\n<li>\u6570\u636e\u9694\u79bb\uff1a\u4e0d\u540c\u7684\u6743\u9650\u80fd\u770b\u5230\u3001\u4ee5\u53ca\u64cd\u4f5c\u4e0d\u540c\u7684\u6570\u636e<\/li>\n<li>\u804c\u8d23\u660e\u786e\uff1a\u7535\u5546\u573a\u666f\u5ba2\u670d\u53ea\u80fd\u67e5\u770b\u6295\u8bc9\u3001\u65e0\u6cd5\u67e5\u9605\u5e97\u94fa\u6536\u76ca\uff0c\u8fd0\u8425\u5219\u80fd\u770b\u5230\u6295\u8bc9\u4ee5\u53ca\u5e97\u94fa\u6536\u76ca<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u6743\u9650\u4e0e\u7528\u6237\u7684\u5173\u7cfb<\/h4>\n<ul>\n<li>\u5728<code>linux<\/code>\u7cfb\u7edf\u4e2d\uff0c\u6743\u9650\u662f\u7528\u6765\u5b9a\u4e49\u7528\u6237\u80fd\u505a\u4ec0\u4e48\uff0c\u4e0d\u80fd\u505a\u4ec0\u4e48\n<ul>\n<li>\u9488\u5bf9\u6587\u4ef6\u5b9a\u4e49\u4e86\u4e09\u79cd\u8eab\u4efd\uff0c\u5206\u522b\u662f\u5c5e\u4e3b<code>owner<\/code>\u3001\u5c5e\u7ec4<code>group<\/code>\u3001\u5176\u4ed6\u4eba<code>others<\/code><\/li>\n<li>\u6bcf\u79cd\u8eab\u4efd\u53c8\u5bf9\u5e94\u4e09\u79cd\u6743\u9650\uff0c\u5206\u522b\u662f\u8bfb<code>read<\/code>\u3001\u5199<code>write<\/code>\u3001\u6267\u884c<code>excute<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/04\/image-1711978747622.png\" alt=\"file\" \/><\/p>\n<ul>\n<li>\u5f53\u4e00\u4e2a\u7528\u6237\u8bbf\u95ee\u6587\u4ef6\u6d41\u7a0b\u5982\u4e0b\n<ul>\n<li>\u5224\u65ad\u7528\u6237\u662f\u5426\u4e3a\u6587\u4ef6\u5c5e\u4e3b\uff0c\u5982\u679c\u662f\u5219\u6309\u5c5e\u4e3b\u6743\u9650\u8fdb\u884c\u8bbf\u95ee<\/li>\n<li>\u5224\u65ad\u7528\u6237\u662f\u5426\u4e3a\u6587\u4ef6\u5c5e\u7ec4\uff0c\u5982\u679c\u662f\u5219\u6309\u5c5e\u7ec4\u6743\u9650\u8fdb\u884c\u8bbf\u95ee<\/li>\n<li>\u5982\u679c\u4e0d\u662f\u6587\u4ef6\u5c5e\u4e3b\u3001\u4e5f\u4e0d\u662f\u6587\u4ef6\u5c5e\u7ec4\uff0c\u5219\u6309\u5176\u4ed6\u4eba\u6743\u9650\u8fdb\u884c\u8bbf\u95ee<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u6743\u9650\u4e2drwx\u7684\u542b\u4e49<\/h4>\n<ul>\n<li><code>linux<\/code>\u4e2d\u6743\u9650\u662f\u7531<code>rwxr-xr-x<\/code>\u8fd99\u4f4d\u5b57\u7b26\u6765\u8868\u793a<\/li>\n<li>\u4e3b\u8981\u63a7\u5236\u6587\u4ef6\u7684\u5c5e\u4e3b<code>user<\/code>\u3001\u5c5e\u7ec4<code>group<\/code>\u3001\u5176\u4ed6\u7528\u6237<code>other<\/code><\/li>\n<\/ul>\n<table>\n<thead>\n<tr>\n<th>\u5b57\u6bcd<\/th>\n<th>\u542b\u4e49<\/th>\n<th>\u4e8c\u8fdb\u5236<\/th>\n<th>\u516b\u8fdb\u5236\u6743\u9650\u8868\u793a\u6cd5<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>r--<\/td>\n<td>\u8bfb\u53d6\u6743\u9650<\/td>\n<td>100<\/td>\n<td>4<\/td>\n<\/tr>\n<tr>\n<td>-w-<\/td>\n<td>\u5199\u5165\u6743\u9650<\/td>\n<td>010<\/td>\n<td>2<\/td>\n<\/tr>\n<tr>\n<td>--x<\/td>\n<td>\u6267\u884c\u6743\u9650<\/td>\n<td>001<\/td>\n<td>1<\/td>\n<\/tr>\n<tr>\n<td>---<\/td>\n<td>\u6ca1\u6709\u6743\u9650<\/td>\n<td>000<\/td>\n<td>0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ul>\n<li>\u6587\u4ef6\u6743\u9650\u793a\u4f8b1\uff1a<code>rwxrw-r-- alice hr file1.txt<\/code><\/li>\n<li>\u6587\u4ef6\u6743\u9650\u793a\u4f8b2\uff1a<code>rw-r----- root dev file2.txt<\/code><\/li>\n<li>\u6587\u4ef6\u6743\u9650\u793a\u4f8b3\uff1a<code>rwxr--rwx jack ops file3.txt<\/code><\/li>\n<\/ul>\n<h3>\u4fee\u6539\u6587\u4ef6\u6743\u9650<\/h3>\n<h4>\u4fee\u6539\u6743\u9650\u7684\u610f\u4e49<\/h4>\n<ul>\n<li>\u7b80\u5355\u6765\u8bf4\u5c31\u662f\uff1a\u8d4b\u4e88\u67d0\u4e2a\u7528\u6237\u6216\u7ec4--&gt;\u80fd\u591f\u4ee5\u4f55\u79cd\u65b9\u5f0f\uff08\u8bfb\u5199\u6267\u884c\uff09--&gt;\u8bbf\u95ee\u6587\u4ef6<\/li>\n<\/ul>\n<h4>\u5982\u4f55\u4fee\u6539\u6743\u9650<\/h4>\n<ul>\n<li>\u4fee\u6539\u6743\u9650\u4f7f\u7528<code>chmod(change mode)<\/code>\u547d\u4ee4\u6765\u5b9e\u73b0\n<ul>\n<li>\u5bf9\u4e8e<code>root<\/code>\u7528\u6237\u800c\u8a00\uff0c\u53ef\u4ee5\u4fee\u6539\u4efb\u4f55\u4eba\u7684\u6587\u4ef6\u6743\u9650<\/li>\n<li>\u5bf9\u4e8e\u666e\u901a\u7528\u6237\u4ec5\u4ec5\u53ea\u80fd\u53d8\u66f4\u5c5e\u4e8e\u81ea\u5df1\u7684\u6587\u4ef6\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h5>UGO\u65b9\u5f0f<\/h5>\n<ul>\n<li>\u7ed9\u6240\u6709\u4eba\u6dfb\u52a0\u6587\u4ef6\u8bfb\u5199\u6267\u884c\u6743\u9650<\/li>\n<\/ul>\n<p><code>chmod a=rwx file<\/code><\/p>\n<ul>\n<li>\u53d6\u6d88\u6587\u4ef6\u7684\u6240\u6709\u6743\u9650<\/li>\n<\/ul>\n<p><code>chmod a=-rwx file<\/code><\/p>\n<ul>\n<li>\u5c5e\u4e3b\u8bfb\u5199\u6267\u884c\uff0c\u5c5e\u7ec4\u8bfb\u5199\uff0c\u5176\u4ed6\u4eba\u65e0\u6743\u9650<\/li>\n<\/ul>\n<p><code>chmod u=rwx,g=rw,o=- file<\/code><\/p>\n<ul>\n<li>\u5c5e\u4e3b\u5c5e\u7ec4\u8bfb\u5199\u6267\u884c\uff0c\u5176\u4ed6\u4eba\u8bfb\u6743\u9650<\/li>\n<\/ul>\n<p><code>chmod ug=rwx,o=r file<\/code><\/p>\n<h5>NUM\u65b9\u5f0f<\/h5>\n<ul>\n<li>\u8bbe\u5b9a\u6587\u4ef6\u6743\u9650644\uff0c<code>rw-r--r--<\/code><\/li>\n<\/ul>\n<p><code>chmod 644 file<\/code><\/p>\n<ul>\n<li>\u8bbe\u5b9a\u6587\u4ef6\u6743\u9650600\uff0c<code>rw-------<\/code><\/li>\n<\/ul>\n<p><code>chmod 600 file<\/code><\/p>\n<ul>\n<li>\u8bbe\u5b9a\u76ee\u5f55\u6743\u9650\u4e3a755\uff0c<code>rwxr-xr-x<\/code><\/li>\n<\/ul>\n<p><code>chmod -R 755 dir<\/code><\/p>\n<h5>\u6743\u9650\u8bbe\u5b9a\u6848\u4f8b<\/h5>\n<ul>\n<li>\u573a\u666f1\uff1a\u9488\u5bf9<code>hr<\/code>\u90e8\u95e8\u7684\u8bbf\u95ee\u76ee\u5f55<code>\/data\/hr<\/code>\u8bbe\u7f6e\u6743\u9650\uff0c\u8981\u6c42\u5982\u4e0b\uff1a\n<ul>\n<li>1.\u8d85\u7ea7\u7ba1\u7406\u5458<code>root<\/code>\u7528\u6237\u548c<code>hr<\/code>\u7ec4\u7684\u5458\u5de5\u53ef\u4ee5\u8bfb\u3001\u5199\u3001\u6267\u884c<\/li>\n<li>2.\u5176\u4ed6\u7528\u6237\u6216\u8005\u7ec4\u6ca1\u6709\u4efb\u4f55\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">groupadd hr\nuseradd hr01 -G hr\nuseradd hr02 -G hr\nmkdir \/home\/hr\nchgrp hr \/home\/hr\nchmod 770 \/home\/hr<\/code><\/pre>\n<ul>\n<li>\u573a\u666f2\uff1a<br \/>\n\u5728<code>linux<\/code>\u4e2d\u6743\u9650\u8bbe\u5b9a\u5bf9\u6587\u4ef6\u548c\u5bf9\u76ee\u5f55\u7684\u5f71\u54cd\u662f\u6709\u533a\u522b\u7684<\/li>\n<\/ul>\n<table>\n<thead>\n<tr>\n<th>\u6743\u9650<\/th>\n<th>\u5bf9\u6587\u4ef6\u7684\u5f71\u54cd<\/th>\n<th>\u5bf9\u76ee\u5f55\u7684\u5f71\u54cd<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u8bfb\u53d6\u6743\u9650\uff08r\uff09<\/td>\n<td>\u5177\u6709\u8bfb\u53d6\\\u9605\u8bfb\u6587\u4ef6\u5185\u5bb9\u6743\u9650<\/td>\n<td>\u5177\u6709\u6d4f\u89c8\u76ee\u5f55\u53ca\u5b50\u76ee\u5f55<\/td>\n<\/tr>\n<tr>\n<td>\u5199\u5165\u6743\u9650\uff08w\uff09<\/td>\n<td>\u5177\u6709\u65b0\u589e\u3001\u4fee\u6539\u6587\u4ef6\u5185\u5bb9\u7684\u6743\u9650<\/td>\n<td>\u5177\u6709\u589e\u52a0\u548c\u5220\u9664\u76ee\u5f55\u5185\u7684\u6587\u4ef6<\/td>\n<\/tr>\n<tr>\n<td>\u6267\u884c\u6743\u9650\uff08x\uff09<\/td>\n<td>\u5177\u6709\u6267\u884c\u6587\u4ef6\u7684\u6743\u9650<\/td>\n<td>\u5177\u6709\u8bbf\u95ee\u76ee\u5f55\u7684\u5185\u5bb9\uff08\u53d6\u51b3\u4e8e\u76ee\u5f55\u4e2d\u6587\u4ef6\u6743\u9650\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u6743\u9650\u5bf9\u6587\u4ef6\u7684\u5f71\u54cd<\/h4>\n<h5>\u9a8c\u8bc1r\u6743\u9650<\/h5>\n<ul>\n<li>\u4f7f\u7528<code>root<\/code>\u8eab\u4efd\uff0c\u65b0\u5efa\u6587\u4ef6\n<ul>\n<li>\u5207\u6362\u666e\u901a\u7528\u6237<\/li>\n<li>\u6d4b\u8bd5\u666e\u901a\u7528\u6237\u5bf9\u8be5\u6587\u4ef6\u662f\u5426\u62e5\u6709\u53ef\u8bfb\u6743\u9650<\/li>\n<li>\u6d4b\u8bd5\u666e\u901a\u7528\u6237\u5bf9\u8be5\u6587\u4ef6\u662f\u5426\u62e5\u6709\u6267\u884c\u548c\u5220\u9664\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">echo &quot;data&quot; &gt; \/opt\/file\nll \/opt\/file\n-rw-r--r-- 1 root root 5 4\u6708   9 09:53 \/opt\/file\n# \u5207\u6362\u666e\u901a\u7528\u6237\nsu - test\n# \u67e5\u770b\n[test@wordpress ~]$ cat \/opt\/file\ndata\n# \u5220\u9664\n[test@wordpress ~]$ rm -f \/opt\/file\nrm: cannot remove &quot;\/opt\/file&quot;: Permission denied<\/code><\/pre>\n<h5>\u9a8c\u8bc1w\u6743\u9650<\/h5>\n<ul>\n<li>\u4fee\u6539\u6743\u9650\u53ea\u6709<code>w<\/code>\n<ul>\n<li>\u6d4b\u8bd5\u80fd\u5426\u67e5\u770b\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u80fd\u5426\u5199\u5165\u6570\u636e\u81f3\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u80fd\u5426\u5220\u9664\u6587\u4ef6<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u4fee\u6539\u6743\u9650\n[root@wordpress opt]# chmod 642 \/opt\/file\n-rw-r---w- 1 root root 5 4\u6708   9 09:53 \/opt\/file\n# \u67e5\u770b\n[test@wordpress ~]$ cat \/opt\/file\ncat: \/opt\/file: Permission denied\n# \u5199\u5165\n[test@wordpress ~]$ vim \/opt\/file  # \u6743\u9650\u4e0d\u8db3\n[test@wordpress ~]$ echo &quot;data2&quot; &gt;&gt; \/opt\/file\n[root@wordpress ~]# cat \/opt\/file\ndata\ndata2\n# \u5220\u9664\n[test@wordpress ~]$ rm -f \/opt\/file\nrm: cannot remove &quot;\/opt\/file&quot;: Permission denied<\/code><\/pre>\n<h5>\u9a8c\u8bc1x\u6743\u9650<\/h5>\n<ul>\n<li>\u4fee\u6539\u6743\u9650\u53ea\u6709<code>x<\/code>\n<ul>\n<li>\u6d4b\u8bd5\u80fd\u5426\u67e5\u770b\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u80fd\u5426\u5199\u5165\u6570\u636e\u81f3\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u80fd\u5426\u5220\u9664\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u6267\u884c\u6587\u4ef6<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u4fee\u6539\u6743\u9650\n[root@wordpress opt]# chmod 641 \/opt\/file\n-rw-r----x 1 root root 11 4\u6708   9 10:05 \/opt\/file\n# \u67e5\u770b\n[test@wordpress ~]$ cat \/opt\/file\ncat: \/opt\/file: Permission denied\n# \u5199\u5165\n[test@wordpress ~]$ vim \/opt\/file  # \u6743\u9650\u4e0d\u8db3\n[test@wordpress ~]$ echo &quot;data3&quot; &gt;&gt; \/opt\/file\n-bash: \/opt\/file: \u6743\u9650\u4e0d\u591f\n# \u5220\u9664\n[test@wordpress ~]$ rm -f \/opt\/file\nrm: cannot remove &quot;\/opt\/file&quot;: Permission denied\n# \u6267\u884c\uff08\u56e0\u4e3a\u6ca1\u6709\u8bfb\uff0c\u6240\u4ee5\u65e0\u6cd5\u6267\u884c\uff09\n[test@wordpress ~]$ \/opt\/file\nbash: \/opt\/file: \u6743\u9650\u4e0d\u591f<\/code><\/pre>\n<h5>\u6587\u4ef6\u6743\u9650\u603b\u7ed3<\/h5>\n<ul>\n<li>1.\u8bfb\u53d6\u6743\u9650<code>r<\/code>\uff1a\u5177\u6709\u8bfb\u53d6\u3001\u9605\u8bfb\u6587\u4ef6\u5185\u5bb9\u6743\u9650\n<ul>\n<li>\u53ea\u80fd\u4f7f\u7528\u67e5\u770b\u7c7b\u547d\u4ee4<code>cat\u3001head\u3001tail\u3001less\u3001more<\/code><\/li>\n<\/ul>\n<\/li>\n<li>2.\u5199\u5165\u6743\u9650<code>w<\/code>\uff1a\u5177\u6709\u65b0\u589e\u3001\u4fee\u6539\u6587\u4ef6\u5185\u5bb9\u7684\u6743\u9650\n<ul>\n<li>\u4f7f\u7528<code>vim<\/code>\u4f1a\u63d0\u793a\u6743\u9650\u62d2\u7edd\uff0c\u4f46\u53ef\u5f3a\u5236\u4fdd\u5b58\uff0c\u4f1a\u8986\u76d6\u6587\u4ef6\u7684\u6240\u6709\u5185\u5bb9<\/li>\n<li>\u4f7f\u7528<code>echo<\/code>\u547d\u4ee4\u91cd\u5b9a\u5411\u7684\u65b9\u5f0f\u53ef\u4ee5\u5f80\u6587\u4ef6\u5199\u5165\u6570\u636e\uff0c<code>&gt;&gt;<\/code>\u53ef\u4ee5\u8ffd\u52a0\u5185\u5bb9<\/li>\n<li>\u4f7f\u7528<code>rm<\/code>\u65e0\u6cd5\u5220\u9664\u6587\u4ef6\uff0c\u56e0\u4e3a\u5220\u9664\u6587\u4ef6\u9700\u8981\u67e5\u770b\u4e0a\u7ea7\u76ee\u5f55\u662f\u5426\u6709<code>w<\/code>\u7684\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<li>3.\u6267\u884c\u6743\u9650<code>x<\/code>\uff1a\u5177\u6709\u6267\u884c\u6587\u4ef6\u7684\u6743\u9650\n<ul>\n<li>\u5355\u72ec\u7684\u6267\u884c\u6743\u9650\u4ec0\u4e48\u7528\u90fd\u6ca1\u6709<\/li>\n<li>\u5982\u679c\u666e\u901a\u7528\u6237\u9700\u8981\u6267\u884c\u6587\u4ef6\uff0c\u9700\u8981\u914d\u5408<code>r<\/code>\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<li>4.\u6587\u4ef6\u6743\u9650\u8bbe\u5b9a\u5e38\u89c1\u7ec4\u5408\n<ul>\n<li>\u6587\u4ef6<code>r<\/code>\u6743\u9650\uff0c\u53ea\u7ed9\u7528\u6237\u67e5\u770b\uff0c\u65e0\u5176\u4ed6\u64cd\u4f5c<\/li>\n<li>\u6587\u4ef6<code>rw<\/code>\u6743\u9650\uff0c\u53ef\u4ee5\u67e5\u770b\u548c\u7f16\u8f91\u6587\u4ef6\u5185\u5bb9<\/li>\n<li>\u6587\u4ef6<code>rx<\/code>\u6743\u9650\uff0c\u5141\u8bb8\u67e5\u770b\u548c\u6267\u884c\u6587\u4ef6\uff0c\u4f46\u4e0d\u80fd\u4fee\u6539\u6587\u4ef6<\/li>\n<li>\u6587\u4ef6<code>rwx<\/code>\u6743\u9650\uff0c\u80fd\u8bfb\u3001\u80fd\u5199\u3001\u80fd\u6267\u884c\u3001<strong>\u4e0d\u80fd\u5220\u9664<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u6743\u9650\u5bf9\u76ee\u5f55\u7684\u5f71\u54cd<\/h4>\n<h5>\u9a8c\u8bc1r\u6743\u9650<\/h5>\n<ul>\n<li>\u4f7f\u7528<code>root<\/code>\u8eab\u4efd\uff0c\u65b0\u5efa\u76ee\u5f55\uff0c\u4fee\u8ba2\u6743\u9650\u4e3a774\n<ul>\n<li>\u5728\u76ee\u5f55\u4e2d\u521b\u5efa\u4e00\u4e2a\u666e\u901a\u6587\u4ef6<\/li>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u67e5\u770b\u76ee\u5f55\u4e2d\u5185\u5bb9<\/li>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u8fdb\u5165\u8be5\u76ee\u5f55<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">mkdir \/data\necho &quot;123&quot; &gt; \/data\/file\nchmod 774 \/data\/\n# \u6d4b\u8bd5\u67e5\u770b\u76ee\u5f55\u5185\u5bb9\n[test@wordpress ~]$ ls \/data\/\nls: \u65e0\u6cd5\u8bbf\u95ee\/data\/file: \u6743\u9650\u4e0d\u591f\nfile\n# \u6d4b\u8bd5\u8fdb\u5165\u76ee\u5f55\n[test@wordpress ~]$ cd \/data\/\n-bash: cd: \/data\/: \u6743\u9650\u4e0d\u591f<\/code><\/pre>\n<h5>\u9a8c\u8bc1w\u6743\u9650<\/h5>\n<ul>\n<li>\u4f7f\u7528<code>root<\/code>\u8eab\u4efd\uff0c\u4fee\u8ba2\u6743\u9650\u4e3a722\n<ul>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u67e5\u770b\u76ee\u5f55\u4e2d\u5185\u5bb9<\/li>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u5220\u9664\u76ee\u5f55\u4e2d\u6587\u4ef6<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u4fee\u8ba2\u6743\u9650\nchmod 772 \/data\/\n# \u6d4b\u8bd5\u67e5\u770b\n[test@wordpress ~]$ ls \/data\/\nls: \u65e0\u6cd5\u6253\u5f00\u76ee\u5f55\/data\/: \u6743\u9650\u4e0d\u591f\n# \u6d4b\u8bd5\u8fdb\u5165\n[test@wordpress ~]$ cd \/data\/\n-bash: cd: \/data\/: \u6743\u9650\u4e0d\u591f\n# \u6d4b\u8bd5\u5220\u9664\n[test@wordpress ~]$ rm -f \/data\/file\nrm: \u65e0\u6cd5\u5220\u9664&quot;\/data\/file&quot;: \u6743\u9650\u4e0d\u591f<\/code><\/pre>\n<h5>\u9a8c\u8bc1x\u6743\u9650<\/h5>\n<ul>\n<li>\u4f7f\u7528<code>root<\/code>\u8eab\u4efd\uff0c\u4fee\u8ba2\u6743\u9650\u4e3a771\n<ul>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u67e5\u770b\u76ee\u5f55\u4e2d\u5185\u5bb9<\/li>\n<li>\u6d4b\u8bd5\u662f\u5426\u80fd\u8fdb\u5165\u76ee\u5f55\u4e2d<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u4fee\u8ba2\u6743\u9650\nchmod 771 \/data\/\n# \u6d4b\u8bd5\u67e5\u770b\n[test@wordpress ~]$ ls \/data\/\nls: \u65e0\u6cd5\u6253\u5f00\u76ee\u5f55\/data\/: \u6743\u9650\u4e0d\u591f\n# \u6d4b\u8bd5\u8fdb\u5165\n[test@wordpress ~]$ cd \/data\/\n[test@wordpress data]$<\/code><\/pre>\n<h5>\u76ee\u5f55\u6743\u9650\u5c0f\u7ed3<\/h5>\n<ul>\n<li>1.\u8bfb\u53d6\u6743\u9650<code>r<\/code>\uff1a\u5177\u6709\u6d4f\u89c8\u76ee\u5f55\u53ca\u5b50\u76ee\u5f55\u6743\u9650\n<ul>\n<li>\u4f7f\u7528<code>ls<\/code>\u547d\u4ee4\u6d4f\u89c8\u76ee\u5f55\u53ca\u5b50\u76ee\u5f55\uff0c\u4f46\u540c\u65f6\u4e5f\u4f1a\u63d0\u793a\u6743\u9650\u62d2\u7edd<\/li>\n<li>\u4f7f\u7528<code>ll<\/code>\u547d\u4ee4\u6d4f\u89c8\u76ee\u5f55\u53ca\u5b50\u76ee\u5f55\uff0c\u6587\u4ef6\u5c5e\u6027\u4f1a\u5e26\u95ee\u53f7\uff0c\u5e76\u4e14\u53ea\u80fd\u770b\u5230\u6587\u4ef6\u540d\n<pre><code class=\"language-bash\">[test@wordpress ~]$ ll \/data\/\nls: \u65e0\u6cd5\u8bbf\u95ee\/data\/file: \u6743\u9650\u4e0d\u591f\n\u603b\u7528\u91cf 0\n????????? ? ? ? ?            ? file<\/code><\/pre>\n<\/li>\n<\/ul>\n<\/li>\n<li>2.\u5199\u5165\u6743\u9650<code>w<\/code>\uff1a\u5177\u6709\u589e\u52a0\u3001\u5220\u9664\u6216\u4fee\u6539\u76ee\u5f55\u5185\u6587\u4ef6\u540d\u6743\u9650\uff0c\u9700\u8981<code>x<\/code>\u6743\u9650\u914d\u5408\n<ul>\n<li>\u53ef\u4ee5\u5728\u76ee\u5f55\u5185\u521b\u5efa\u6587\u4ef6\uff0c\u5220\u9664\u6587\u4ef6\uff08\u8ddf\u6587\u4ef6\u672c\u8eab\u6743\u9650\u65e0\u5173\uff09<\/li>\n<li>\u4e0d\u80fd\u8fdb\u5165\u76ee\u5f55\u3001\u4e0d\u80fd\u590d\u5236\u76ee\u5f55\u3001\u4e0d\u80fd\u5220\u9664\u76ee\u5f55\u3001\u4e0d\u80fd\u79fb\u52a8\u76ee\u5f55<\/li>\n<\/ul>\n<\/li>\n<li>3.\u6267\u884c\u6743\u9650<code>x<\/code>\uff1a\u5177\u6709\u8fdb\u5165\u76ee\u5f55\u7684\u6743\u9650\n<ul>\n<li>\u53ea\u80fd\u8fdb\u5165\u76ee\u5f55<\/li>\n<li>\u4e0d\u80fd\u6d4f\u89c8\u3001\u590d\u5236\u3001\u79fb\u52a8\u3001\u5220\u9664<\/li>\n<\/ul>\n<\/li>\n<li>4.\u76ee\u5f55\u6743\u9650\u8bbe\u5b9a\u5c0f\u7ed3\n<ul>\n<li>\u76ee\u5f55<code>rx<\/code>\u6743\u9650\uff0c\u5141\u8bb8\u6d4f\u89c8\u76ee\u5f55\u5185\u6587\u4ef6\u4ee5\u53ca\u5b50\u76ee\u5f55\uff0c\u4e0d\u5141\u8bb8\u5728\u8be5\u76ee\u5f55\u4e0b\u521b\u5efa\u6587\u4ef6\u3001\u5220\u9664\u6587\u4ef6<\/li>\n<li>\u76ee\u5f55<code>rw<\/code>\u6743\u9650\uff0c\u80fd\u67e5\u770b\u76ee\u5f55\uff0c\u80fd\u5f80\u76ee\u5f55\u5199\u5165\u6587\u4ef6\uff0c\u4f46\u65e0\u6cd5\u8fdb\u5165\u76ee\u5f55\uff08\u4f7f\u7528\u60c5\u51b5\u592a\u5c11\uff09<\/li>\n<li>\u76ee\u5f55<code>rwx<\/code>\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3>\u4fee\u6539\u6587\u4ef6\u6240\u5c5e\u5173\u7cfb<\/h3>\n<h4>\u4fee\u6539\u6587\u4ef6\u6240\u5c5e\u5173\u7cfb\u7684\u610f\u4e49<\/h4>\n<ul>\n<li>\u4fee\u6539\u6587\u4ef6\u6240\u5c5e\u5173\u7cfb\u7684\u610f\u4e49\u662f\u4ec0\u4e48\n<ul>\n<li>\u5047\u8bbe\uff1a<code>alice<\/code>\u7528\u6237\u73b0\u5728\u6709\u5f88\u591a\u623f\u4ea7\uff0c\u5e0c\u671b\u5c06\u5176\u4e2d\u4e00\u5957\u51fa\u552e\u7ed9<code>jack<\/code>\u7528\u6237\u53d8\u73b0<\/li>\n<li>1.\u901a\u8fc7<code>root<\/code>\u7528\u6237\u53d8\u66f4\u5c5e\u4e3b\u5173\u7cfb\uff0c\u5c06\u623f\u4ea7\u9ed8\u8ba4\u5c5e\u4e3b\u8eab\u4efd<code>alice<\/code>\u4fee\u6539\u4e3a<code>jack<\/code><\/li>\n<li>2.\u4fee\u6539\u5b8c\u6210\u540e\u8be5\u623f\u4ea7\u62e5\u6709\u4eba\u5219\u4e3a<code>jack<\/code>\u7528\u6237\uff0c\u800c\u4e0d\u518d\u662f<code>alice<\/code>\u7528\u6237<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u5982\u4f55\u4fee\u6539\u6587\u4ef6\u7684\u6240\u5c5e\u5173\u7cfb<\/h4>\n<ul>\n<li>\u53ef\u4ee5\u4f7f\u7528<code>chown(change owner)\u3001chgrp(change group)<\/code>\u547d\u4ee4\u5b9e\u73b0\n<ul>\n<li><code>chown<\/code>\u80fd\u53d8\u66f4\u6587\u4ef6\u7684\u5c5e\u4e3b\u548c\u5c5e\u7ec4<\/li>\n<li><code>chgrp<\/code>\u4ec5\u80fd\u53d8\u66f4\u6587\u4ef6\u7684\u5c5e\u7ec4<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h5>chown(change owner)<\/h5>\n<ol>\n<li>\n<p>\u51c6\u5907\u73af\u5883\uff0c\u521b\u5efa\u6587\u4ef6\u548c\u76ee\u5f55<br \/>\n<code>mkdir \/data<\/code><\/p>\n<\/li>\n<li>\n<p>\u4fee\u6539\u5c5e\u4e3b\u4e3a<code>bin<\/code><br \/>\n<code>chown bin \/data<\/code><\/p>\n<\/li>\n<li>\n<p>\u4fee\u6539\u5c5e\u7ec4\u4e3a<code>adm<\/code><br \/>\n<code>chown .adm \/data<\/code><\/p>\n<\/li>\n<li>\n<p>\u4fee\u6539\u76ee\u5f55\u5c5e\u4e3b\u4e3a<code>root<\/code>\uff0c\u5c5e\u7ec4\u4e3a<code>root<\/code>\uff0c\u5e76\u8fdb\u884c\u9012\u5f52\u6388\u6743<br \/>\n<code>chown -R root.root \/data<\/code><\/p>\n<\/li>\n<\/ol>\n<h5>chgrp(change group)<\/h5>\n<ul>\n<li>\u4fee\u6539\u5c5e\u7ec4\u4e3a<code>adm<\/code><br \/>\n<code>chgrp adm \/data<\/code><\/li>\n<\/ul>\n<h4>\u4fee\u6539\u6587\u4ef6\u6240\u5c5e\u5173\u7cfb\u573a\u666f<\/h4>\n<h5>\u57fa\u4e8ehttpd\u573a\u666f\u8bf4\u660e<\/h5>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/04\/image-1712754629615.png\" alt=\"file\" \/><\/p>\n<h5>\u57fa\u4e8ehttpd\u573a\u666f\u5b9e\u8df5<\/h5>\n<ol>\n<li>\n<p>\u5b89\u88c5<code>httpd<\/code><\/p>\n<pre><code class=\"language-bash\">yum install httpd\nsystemctrl start httpd<\/code><\/pre>\n<\/li>\n<li>\n<p>\u5728\u9ed8\u8ba4\u7ad9\u70b9\u76ee\u5f55\u521b\u5efa\u6587\u4ef6\uff0c\u4fee\u8ba2\u5176\u6743\u9650\uff0c\u7136\u540e\u9a8c\u8bc1\u662f\u5426\u80fd\u8bbf\u95ee\u6210\u529f<\/p>\n<pre><code class=\"language-bash\">echo &quot;new web site&quot; &gt; \/var\/www\/html\/index.html\nchmod 600 \/var\/www\/html\/index.html<\/code><\/pre>\n<\/li>\n<li>\n<p>\u65e0\u6cd5\u8bbf\u95ee\uff0c\u89e3\u51b3\u6743\u9650\u4e0d\u8db3\uff0c\u6709\u5982\u4e0b\u4e24\u79cd\u65b9\u5f0f\uff1a<\/p>\n<pre><code class=\"language-bash\"># \u65b9\u6cd5\u4e00\uff1a\nchmod 777 \/var\/www\/html\/index.html\n# \u65b9\u6cd5\u4e8c\uff1a\nps -ef | grep httpd\nchown apache.apache \/var\/www\/html\/index.html\nchmod 600 \/var\/www\/html\/index.html<\/code><\/pre>\n<\/li>\n<\/ol>\n<h4>\u6743\u9650\u76f8\u5173\u7ec3\u4e60<\/h4>\n<ul>\n<li>\u573a\u666f1\uff0c\u9700\u6c42\u5982\u4e0b\n<ul>\n<li>1.\u521b\u5efa<code>project_a,project_b<\/code>\u4e24\u4e2a\u7ec4<\/li>\n<li>2.\u521b\u5efa\u7528\u6237<code>a1\u3001a2\u3001b1\u3001b2<\/code>\u56db\u4e2a\u7528\u6237<\/li>\n<li>3.\u5c06\u7528\u6237<code>a1\u3001a2<\/code>\u6dfb\u52a0\u5230<code>project_a<\/code>\u7ec4\uff0c\u7528\u6237<code>b1\u3001b2<\/code>\u6dfb\u52a0\u5230<code>project_b<\/code>\u7ec4<\/li>\n<li>4.\u6240\u6709\u76ee\u5f55\u4ee5\u53ca\u6587\u4ef6\u90fd\u4fdd\u5b58\u5728<code>\/all<\/code>\u76ee\u5f55\u4e0b<\/li>\n<li>5.\u5728<code>\/all<\/code>\u76ee\u5f55\u4e0b\u521b\u5efa\u4e24\u4e2a\u9879\u76ee\u76ee\u5f55\uff0c\u5206\u522b\u4e3a<code>project_a\u3001project_b<\/code><\/li>\n<li>6.\u5728\u6bcf\u4e2a\u9879\u76ee\u4e0b\u521b\u5efa\u4e00\u4e2a\u4e0e\u7528\u6237\u540c\u540d\u7684\u76ee\u5f55<\/li>\n<li>7.\u5404\u4e2a\u9879\u76ee\u4e4b\u95f4\u4e0d\u53ef\u4ee5\u4e92\u76f8\u8bbf\u95ee\uff08<code>project_a<\/code>\u9879\u76ee\u4e0d\u53ef\u4ee5\u8bbf\u95ee<code>project_bb<\/code>\u9879\u76ee\uff09<\/li>\n<li>8.\u76f8\u540c\u90e8\u95e8\u7528\u6237\u4e4b\u95f4\u53ef\u4ee5\u4e92\u76f8\u67e5\u770b\u6587\u4ef6\u5185\u5bb9\uff0c\u4f46\u4e0d\u53ef\u4ee5\u4fee\u6539\uff0c\u7528\u6237\u81ea\u5df1\u521b\u5efa\u7684\u6587\u4ef6\u81ea\u5df1\u53ef\u4ee5\u4fee\u6539<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u9700\u6c421-\u9700\u6c423\ngroupadd project_a\ngroupadd project_b\nuseradd a1 -G project_a\nuseradd a2 -G project_a\nuseradd b1 -G project_b\nuseradd b2 -G project_b\n# \u9700\u6c424-\u9700\u6c426\nmkdir \/all\nmkdir \/all\/{project_a,project_b} -p\nmkdir \/all\/project_a\/{a1,a2} -p\nmkdir \/all\/project_b{b1,b2} -p\n# \u9700\u6c427\nchmod -R 750 \/all\/project_a\nchmod -R 750 \/all\/project_b\n# \u9700\u6c428\nchown -R a1.project_a \/all\/porject_a\/a1\/\nchown -R a2.project_a \/all\/porject_a\/a2\/\nchown -R b1.project_b \/all\/porject_b\/b1\/\nchown -R b1.project_b \/all\/porject_b\/b2\/<\/code><\/pre>\n<h3>\u6587\u4ef6\u7279\u6b8a\u6743\u9650<\/h3>\n<ul>\n<li>\u6b64\u524d\u6211\u4eec\u5df2\u7ecf\u5b66\u4e60\u8fc7<code>r\u3001w\u3001x<\/code>\u8fd9\u4e09\u79cd\u6743\u9650\uff0c\u4f46\u5728\u67e5\u8be2\u7cfb\u7edf\u6587\u4ef6\u65f6\u4f1a\u53d1\u73b0\u6709\u4e00\u4e9b\u5176\u4ed6\u6743\u9650\u7684\u5b57\u6bcd\n<ul>\n<li>\u6bd4\u5982\uff1a<code>\/usr\/bin\/passwd<\/code>\u6587\u4ef6\uff0c\u5c5e\u4e3b\u5e94\u8be5\u662f<code>x<\/code>\u7684\u6743\u9650\u4f4d\u51fa\u73b0\u4e86<code>s<\/code><\/li>\n<li>\u6bd4\u5982\uff1a<code>\/usr\/bin\/locate<\/code>\u6587\u4ef6\uff0c\u5c5e\u7ec4\u5e94\u8be5\u662f<code>x<\/code>\u7684\u6743\u9650\u4f4d\u51fa\u73b0\u4e86<code>s<\/code><\/li>\n<li>\u6bd4\u5982\uff1a<code>\/tmp<\/code>\u76ee\u5f55\uff0c\u5176\u4ed6\u4eba\u5e94\u8be5\u662f<code>x<\/code>\u7684\u6743\u9650\u4f4d\u51fa\u73b0\u4e86<code>t<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u7279\u6b8a\u6743\u9650SUID<\/h4>\n<h5>SUID\u4ea7\u751f\u80cc\u666f<\/h5>\n<p>\u5728<code>linux<\/code>\u7cfb\u7edf\u4e2d\uff0c\u6bcf\u4e2a\u666e\u901a\u7528\u6237\u90fd\u53ef\u4ee5\u66f4\u6539\u81ea\u5df1\u7684\u5bc6\u7801\uff0c\u8fd9\u662f\u5408\u7406\u7684\u8bbe\u7f6e\u3002\u4f46\u662f\u7528\u6237\u7684\u79d8\u5bc6\u4fe1\u606f\u5b58\u50a8\u5728<code>\/etc\/shadow<\/code>\u6587\u4ef6\u4e2d\uff0c\u4e5f\u5c31\u662f\u8bf4\uff0c\u666e\u901a\u7528\u6237\u5728\u66f4\u6539\u81ea\u5df1\u5bc6\u7801\u65f6\u4f1a\u66f4\u65b0<code>\/etc\/shadow<\/code>\u6587\u4ef6\u7684\u5185\u5bb9<br \/>\n\u4f46<code>\/etc\/shadow<\/code>\u6587\u4ef6\u4e0d\u5141\u8bb8\u4efb\u4f55\u4eba\u4fee\u6539\uff0c\u90a3\u4e3a\u4ec0\u4e48\u666e\u901a\u7528\u6237\u53ef\u4ee5\u4fee\u6539\u81ea\u5df1\u7684\u6743\u9650\u5462\uff1f<\/p>\n<pre><code class=\"language-bash\">[root@wordpress ~]# ll \/etc\/shadow\n---------- 1 root root 794 4\u6708  10 20:51 \/etc\/shadow<\/code><\/pre>\n<p>\u5176\u5b9e\uff0c\u666e\u901a\u7528\u6237\u53ef\u4ee5\u4fee\u6539\u81ea\u5df1\u7684\u5bc6\u7801\u5728\u4e8e<code>passwd<\/code>\u547d\u4ee4\u672c\u8eab\uff0c\u8be5\u547d\u4ee4\u62e5\u6709\u7279\u6b8a\u6743\u9650<code>SetUID<\/code>\u4e5f\u5c31\u662f\u5c5e\u4e3b\u7684\u6743\u9650\u4f4d\u7684\u6267\u884c\u6743\u9650\u4e0a\u662f<code>s<\/code>\uff0c\u90a3\u5982\u4f55\u89e3\u91ca\u7279\u6b8a\u6743\u9650<code>SetUID<\/code>\uff1a\u5f53\u4e00\u4e2a\u6267\u884c\u6587\u4ef6\u8bbe\u7f6e<code>SetUID<\/code>\u540e\uff0c\u7528\u6237\u5728\u6267\u884c\u8fd9\u4e2a\u6587\u4ef6\u65f6\u5c06\u4ee5\u6587\u4ef6\u6240\u6709\u8005\u7684\u8eab\u4efd\u6765\u6267\u884c\u3002<br \/>\n<img decoding=\"async\" src=\"\/wp-content\/uploads\/2024\/04\/image-1712758972152.png\" alt=\"file\" \/><\/p>\n<ul>\n<li>\u5f53\u6211\u4eec\u4f7f\u7528\u666e\u901a\u7528\u6237<code>xxx<\/code>\u6267\u884c<code>passwd<\/code>\u547d\u4ee4\u65f6\u4f1a\u53d1\u751f\u4ec0\u4e48\u53d8\u5316\u5462\uff1f\n<ul>\n<li>1.\u7531\u4e8e<code>passwd<\/code>\u547d\u4ee4\u62e5\u6709<code>suid<\/code>\u7279\u6b8a\u6743\u9650\uff08\u5728\u547d\u4ee4\u5c5e\u4e3b\u6743\u9650\u4f4d\u6709\u4e00\u4e2a<code>s<\/code>\uff09<\/li>\n<li>2.\u6240\u4ee5<code>passwd<\/code>\u547d\u4ee4\u5728\u6267\u884c\u7684\u8fc7\u7a0b\u4e2d\uff0c\u4f1a\u4ee5\u547d\u4ee4\u7684\u5c5e\u4e3b\u8eab\u4efd\u8fd0\u884c\u8be5\u547d\u4ee4\uff08\u4e5f\u5c31\u662f<code>root<\/code>\u8eab\u4efd\uff09<\/li>\n<li>3.\u603b\u7ed3\uff1a<code>xxx<\/code>--&gt;<code>passwd<\/code>--&gt;\u8f6c\u6362\u4e3a\u547d\u4ee4\u5c5e\u4e3b\u8eab\u4efd<code>root<\/code>\u6267\u884c--&gt;\u64cd\u4f5c<code>\/etc\/shadow<\/code>\u4fe1\u606f\u53d8\u66f4<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h5>SUID\u914d\u7f6e\u8bed\u6cd5<\/h5>\n<pre><code class=\"language-bash\">chmod u+s \/usr\/bin\/cat\nchmod 4755 \/usr\/bin\/cat<\/code><\/pre>\n<h5>SUID\u4f5c\u7528\u603b\u7ed3<\/h5>\n<ul>\n<li>1.\u8ba9\u666e\u901a\u7528\u6237\u5bf9\u53ef\u6267\u884c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u4e34\u65f6\u62e5\u6709\u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u6240\u5c5e\u4e3b\u6743\u9650<\/li>\n<li>2.\u5982\u679c\u8bbe\u7f6e\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u6ca1\u6709\u6267\u884c\u6743\u9650\uff0c\u90a3\u4e48<code>suid<\/code>\u7684\u6743\u9650\u5c31\u662f\u5927<code>S<\/code><\/li>\n<li>3.\u7279\u6b8a\u6743\u9650<code>suid<\/code>\u4ec5\u5bf9\u4e8c\u8fdb\u5236\u53ef\u6267\u884c\u7a0b\u5e8f\u6709\u6548\uff0c\u5176\u4ed6\u6587\u4ef6\u6216\u76ee\u5f55\u5219\u65e0\u6548<\/li>\n<li>\u6ce8\u610f\uff1a<code>suid<\/code>\u76f8\u5bf9\u5371\u9669\uff0c\u4e0d\u5efa\u8bae\u5bf9<code>vim<\/code>\u6216<code>rm<\/code>\u8fdb\u884c<code>suid<\/code>\u8bbe\u5b9a\u64cd\u4f5c<\/li>\n<\/ul>\n<h4>\u7279\u6b8a\u6743\u9650SGID<\/h4>\n<h5>\u4ec0\u4e48\u662fSGID<\/h5>\n<ul>\n<li><code>SGID<\/code>\u8bbe\u7f6e\u4e8c\u8fdb\u5236\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u547d\u4ee4\u5728\u6267\u884c\u7684\u8fc7\u7a0b\u4e2d\uff0c\u4f1a\u4ee5\u547d\u4ee4\u7684\u5c5e\u7ec4\u8eab\u4efd\u8fd0\u884c\u8be5\u547d\u4ee4<\/li>\n<li><code>SGID<\/code>\u8bbe\u7f6e\u5728\u76ee\u5f55\u4e0a\uff0c\u8fd9\u65f6\u5019\u5728\u8be5\u76ee\u5f55\u4e0b\u65b0\u5efa\u7684\u6587\u4ef6\/\u76ee\u5f55\u81ea\u52a8\u7ee7\u627f\u7236\u76ee\u5f55\u7684\u5c5e\u7ec4<\/li>\n<\/ul>\n<h5>SGID\u914d\u7f6e\u8bed\u6cd5<\/h5>\n<pre><code class=\"language-bash\">chmod g+s \/dir\nchmod 2755\/dir<\/code><\/pre>\n<h5>SGID\u573a\u666f\u8bf4\u660e<\/h5>\n<ul>\n<li>\u9700\u6c42\u63cf\u8ff0\n<ul>\n<li>\u7cfb\u7edf\u6709\u4e24\u4e2a\u7528\u6237\uff0c\u5206\u522b\u4e3a<code>ex1<\/code>\u548c<code>ex2<\/code>\uff0c\u8fd9\u4e24\u4e2a\u7528\u6237\u90fd\u62e5\u6709<code>example<\/code>\u9644\u52a0\u7ec4<\/li>\n<li>\u8fd9\u4e24\u4e2a\u7528\u6237\u9700\u8981\u5171\u540c\u62e5\u6709<code>\/data\/code<\/code>\u76ee\u5f55\u7684\u5f00\u53d1\u6743<\/li>\n<li>\u4e92\u76f8\u4e4b\u95f4\u80fd\u4fee\u6539\u5f7c\u6b64\u7684\u6587\u4ef6\uff0c\u4e14\u8be5\u76ee\u5f55\u4e0d\u5141\u8bb8\u5176\u4ed6\u4eba\u67e5\u9605\n<pre><code class=\"language-bash\">groupadd example\nuseradd ex1 -G example\nuseradd ex2 -G example\nmkdir \/data\/code\nchgrp example \/data\/code\nchmod 770 \/data\/code\/\nchmod 2770 \/data\/code<\/code><\/pre>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>\u7279\u6b8a\u6743\u9650SBIT<\/h4>\n<h5>\u4ec0\u4e48\u662fSBIT<\/h5>\n<p>\u4e00\u65e6\u76ee\u5f55\u88ab\u8d4b\u4e88\u4e86\u7c98\u6ede\u4f4d<code>Sticky(SI TI KI)<\/code>,\u9664\u4e86<code>root<\/code>\u53ef\u4ee5\u5220\u9664\u76ee\u5f55\u4e2d\u7684\u6240\u6709\u6587\u4ef6\uff0c\u666e\u901a\u7528\u6237\u5bf9\u8be5\u76ee\u5f55\u5c31\u7b97\u62e5\u6709\u4e86<code>w<\/code>\u6743\u9650\uff0c\u4e5f\u53ea\u80fd\u5220\u9664\u81ea\u5df1\u5efa\u7acb\u7684\u6587\u4ef6\uff0c\u800c\u4e0d\u80fd\u5220\u9664\u5176\u4ed6\u7528\u6237\u5efa\u7acb\u7684\u6587\u4ef6<\/p>\n<h5>SBIT\u914d\u7f6e\u793a\u4f8b<\/h5>\n<p>\u9700\u6c42\uff1a\u9ed8\u8ba4\u60c5\u51b5\u4e0b<code>\/tmp<\/code>\u4e0d\u662f\u7c98\u6ede\u4f4d\uff0c\u5982\u4f55\u5c06\u6b64\u76ee\u5f55\u8bbe\u7f6e\u4e3a\u7c98\u6ede\u4f4d<\/p>\n<pre><code class=\"language-bash\">chmod 1755 \/tmp\nchmod o+t \/tmp<\/code><\/pre>\n<h5>SBIT\u4f7f\u7528\u573a\u666f<\/h5>\n<p>\u540e\u671f\u5f53\u6211\u4eec\u8981\u521d\u59cb\u5316<code>mysql<\/code>\u670d\u52a1\u65f6\uff0c\u670d\u52a1\u4f1a\u521b\u5efa\u4e00\u4e9b\u4e34\u65f6\u6587\u4ef6\u5b58\u50a8\u81f3<code>\/tmp<\/code>\u76ee\u5f55\u4e0b\uff0c\u5f53\u521d\u59cb\u5316\u5b8c\u6bd5\u540e\uff0c\u81ea\u5df1\u4f1a\u6e05\u7406\u6389\u91cc\u9762\u7684\u6570\u636e\uff0c\u522b\u4eba\u65e0\u6cd5\u6e05\u7406\u3002\uff08\u5982\u679c\u8fd9\u4e2a\u76ee\u5f55\u4e0d\u662f\u7c98\u6ede\u4f4d\uff0c\u90a3\u4e48\u521d\u59cb\u5316<code>mysql<\/code>\u5c31\u4f1a\u62a5\u9519\uff09<\/p>\n<ul>\n<li>\u7f16\u5199<code>shell<\/code>\u811a\u672c\u6a21\u62df\u6b64\u573a\u666f\n<ul>\n<li>\u6a21\u62df<code>mysql<\/code>\u521d\u59cb\u5316\u521b\u5efa\u6587\u4ef6\u81f3<code>\/tmp<\/code>\u76ee\u5f55<\/li>\n<li>\u6a21\u62df\u666e\u901a\u7528\u6237\u767b\u5f55\u7cfb\u7edf\u5220\u9664<code>mysql<\/code>\u7684\u521d\u59cb\u5316\u6587\u4ef6<\/li>\n<li>\u5982\u679c\u666e\u901a\u7528\u6237\u5220\u9664\u6210\u529f\uff0c\u5219\u521d\u59cb\u5316\u5931\u8d25\uff08\u56e0\u4e3a<code>mysql<\/code>\u670d\u52a1\u521b\u5efa\u7684\u6587\u4ef6\uff0c\u9700\u8981\u81ea\u884c\u9500\u6bc1\uff09<\/li>\n<li>\u5982\u679c\u666e\u901a\u7528\u6237\u5220\u9664\u5931\u8d25\uff0c\u5219<code>mysql<\/code>\u670d\u52a1\u5c1d\u8bd5\u5220\u9664\uff0c\u5220\u9664\u6210\u529f\uff0c\u5219\u521d\u59cb\u5316\u6210\u529f<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h5>SBIT\u4f5c\u7528\u603b\u7ed3<\/h5>\n<ul>\n<li>\u8ba9\u6240\u6709\u666e\u901a\u7528\u6237\u5bf9\u8be5\u76ee\u5f55\u5177\u6709\u5199\u5165\u6743\u9650\uff0c\u5e76\u4e14\u80fd\u5b9e\u73b0\u6bcf\u4e2a\u7528\u6237\u53ea\u80fd\u5220\u9664\u81ea\u5df1\u7684\u6587\u4ef6<\/li>\n<li>\u7c98\u6ede\u4f4d\u76ee\u5f55\u8868\u73b0\u5728<code>others<\/code>\u7684<code>x<\/code>\u4f4d\uff0c\u7528<code>t<\/code>\u8868\u793a\uff0c\u5982\u679c\u6ca1\u6709\u6267\u884c\u6743\u9650\u5219\u663e\u793a\u4e3a<code>T<\/code><\/li>\n<li>\u7c98\u6ede\u4f4d\u76ee\u5f55\u7684\u5c5e\u4e3b\u4ee5\u53ca<code>root<\/code>\u7528\u6237\u6709\u6743\u5220\u9664\u76ee\u5f55\u4e2d\u7684\u5185\u5bb9\uff0c\u5176\u4ed6\u7528\u6237\u65e0\u6743\u9650\u5220\u9664<\/li>\n<\/ul>\n<h4>\u7279\u6b8a\u6743\u9650\u76f8\u5173\u7ec3\u4e60<\/h4>\n<ul>\n<li>\u9700\u6c42\u5982\u4e0b\uff1a\n<ul>\n<li>\u5047\u5982\u4f60\u662f\u4e00\u4e2a\u5458\u5de5\u7ec4\u7684\u56e2\u961f\u9886\u5bfc\uff0c\u4e3a<code>zzz<\/code>\u516c\u53f8\u5de5\u4f5c<\/li>\n<li>\u516c\u53f8\u8981\u6c42\u4f60\u521b\u5efa\u4e00\u4e2a<code>dir_zzz<\/code>\u76ee\u5f55<\/li>\n<li>\u8ba9<code>ops<\/code>\u7ec4\u6210\u5458\u90fd\u80fd\u5728\u8be5\u76ee\u5f55\u4e0b\u521b\u5efa\u6216\u8bbf\u95ee\u6587\u4ef6<\/li>\n<li>\u4f46\u662f\u9664\u4e86\u6587\u4ef6\u521b\u5efa\u8005\u4e4b\u5916\u7684\u5176\u4ed6\u4eba\u4e0d\u80fd\u5220\u9664\u6587\u4ef6<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<pre><code class=\"language-bash\"># \u8d4b\u4e88\u6743\u9650\nchgrp ops \/dir_zzz\nchmod g+s \/dir_zzz\nchmod o+t \/dir_zzz<\/code><\/pre>\n<h3>\u6587\u4ef6\u7279\u6b8a\u5c5e\u6027<\/h3>\n<h4>\u4ec0\u4e48\u662f\u7279\u6b8a\u5c5e\u6027<\/h4>\n<p>\u8fd9\u7c7b\u6587\u4ef6\u5c5e\u6027\u51cc\u9a7e\u4e8e<code>rwx<\/code>\u57fa\u7840\u6743\u9650\u4e4b\u4e0a\uff0c\u662f\u4e00\u79cd\u9ad8\u7ea7\u5c5e\u6027<\/p>\n<h4>\u7279\u6b8a\u5c5e\u6027\u7684\u4f5c\u7528<\/h4>\n<ul>\n<li>\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\uff0c\u4e0d\u5141\u8bb8\u88ab\u4fee\u6539\u3001\u79fb\u52a8\u3001\u5220\u9664\uff0c\u5305\u62ec<code>root<\/code>\u4e5f\u4e0d\u884c\uff0c\u9002\u5408<code>\/etc\/passwd<\/code><\/li>\n<li>\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\uff0c\u4ec5\u5141\u8bb8\u5f80\u6587\u4ef6\u91cc\u9762\u8ffd\u52a0\u6570\u636e\uff0c\u4e0d\u5141\u8bb8\u4fee\u6539\u3001\u79fb\u52a8\u3001\u5220\u9664\uff0c\u9002\u5408<code>sudo<\/code>\u5ba1\u8ba1\u65e5\u5fd7<br \/>\n<h4>\u7279\u6b8a\u5c5e\u6027\u5982\u4f55\u914d\u7f6e<\/h4>\n<\/li>\n<li><code>linux<\/code>\u7cfb\u7edf\u901a\u8fc7<code>chattr<\/code>\u6765\u5b9e\u73b0\u7279\u6b8a\u5c5e\u6027\u7684\u914d\u7f6e<\/li>\n<li>\u547d\u4ee4\u683c\u5f0f\uff1a<code>chattr [+-=] [\u9009\u9879] \u6587\u4ef6\u6216\u76ee\u5f55\u540d<\/code>\n<ul>\n<li><code>a<\/code>\uff1a\u53ef\u5bf9\u6587\u4ef6\u8fdb\u884c\u8ffd\u52a0\u5185\u5bb9<\/li>\n<li><code>i<\/code>\uff1a\u9501\u5b9a\u6587\u4ef6\uff0c\u4e0d\u5141\u8bb8\u5176\u4ed6\u64cd\u4f5c<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ol>\n<li>\n<p>\u914d\u7f6e<code>\/etc\/passwd<\/code>\u6587\u4ef6\uff0c\u4e0d\u80fd\u6539\u3001\u4e0d\u80fd\u8ffd\u52a0\u3001\u4e0d\u80fd\u5220\u9664<\/p>\n<pre><code class=\"language-bash\"># \u8d4b\u4e88i\u6743\u9650\nchattr +i \/etc\/passwd\n# \u9a8c\u8bc1\u6743\u9650\nrm -f \/etc\/passwd\nrm: cannot remove &#039;\/etc\/passwd&#039;: Operation not permitted<\/code><\/pre>\n<\/li>\n<li>\n<p>\u914d\u7f6e<code>\/var\/log\/secure<\/code>\u6587\u4ef6\uff0c\u53ea\u80fd\u8ffd\u52a0\u5199\u5165\u65e5\u5fd7\uff0c\u4e0d\u5141\u8bb8\u624b\u52a8\u4fee\u6539\uff0c\u4e5f\u4e0d\u5141\u8bb8\u5220\u9664<\/p>\n<pre><code class=\"language-bash\"># \u8d4b\u4e88a\u6743\u9650\nchattr +a \/var\/log\/secure\nlsattr \/var\/log\/secute\n------a--------- \/var\/log\/secure\n# \u6d4b\u8bd5\u8ffd\u52a0\u6570\u636e\necho &quot;hello&quot; &gt;&gt; \/var\/log\/secure\n# \u4e0d\u80fd\u5220\u9664\uff0c\u4e0d\u80fd\u4fee\u6539\nrm -f \/var\/log\/secure\nrm: cannot remove &#039;\/var\/log\/secure&#039;: Operation not permitted<\/code><\/pre>\n<\/li>\n<li>\n<p>\u5982\u679c\u60f3\u53d6\u6d88\u7279\u6b8a\u5c5e\u6027\uff0c\u9700\u8981\u4f7f\u7528<code>root<\/code>\u8eab\u4efd<\/p>\n<pre><code class=\"language-bash\">chattr -i \/etc\/passwd\nchattr -a \/var\/log\/secure<\/code><\/pre>\n<\/li>\n<\/ol>\n<h4>\u7279\u6b8a\u5c5e\u6027\u573a\u666f\u793a\u4f8b<\/h4>\n<ul>\n<li>\u6a21\u62df\u75c5\u6bd2\u7be1\u6539\u7ad9\u70b9\uff0c\u7136\u540e\u4f7f\u7528<code>chattr<\/code>\u9501\u4f4f\u6587\u4ef6\uff0c\u8ba9\u75c5\u6bd2\u7a0b\u5e8f\u65e0\u6cd5\u7be1\u6539\uff0c\u7136\u540e\u8ffd\u8e2a\u5e76\u6740\u6b7b\u75c5\u6bd2\u7a0b\u5e8f\n<ul>\n<li>\u5b89\u88c5\u5e76\u542f\u52a8<code>httpd<\/code>\u670d\u52a1<\/li>\n<li>\u6a21\u62df\u75c5\u6bd2\u811a\u672c\u7be1\u6539\u7f51\u9875\u5185\u5bb9<\/li>\n<li>\u9501\u5b9a\u7be1\u6539\u6587\u4ef6\uff0c\u7136\u540e\u627e\u51fa\u75c5\u6bd2\uff0c\u5c06\u5176\u6740\u6b7b<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ol>\n<li>\n<p>\u5b89\u88c5<code>http<\/code>\u670d\u52a1\uff0c\u7136\u540e\u542f\u52a8<\/p>\n<pre><code class=\"language-bash\">yum install httpd\nsystemctl start httpd<\/code><\/pre>\n<\/li>\n<li>\n<p>\u7f16\u5199\u75c5\u6bd2\u811a\u672c\uff0c\u5c1d\u8bd5\u7be1\u6539\u7f51\u9875\u5185\u5bb9<\/p>\n<pre><code class=\"language-bash\">cat \/usr\/bin\/virus\n#!\/usr\/bin\/bash\nweb_site=\/var\/www\/html\/index.html\nwhile true\ndo\n# \u6a21\u62df\u5165\u4fb5\necho&quot;\u6211\u662f\u75c5\u6bd2\u7684code&quot; &gt; $(web_site)\nsleep 10\n# \u5c06\u8fd9\u4e2a\u811a\u672c\u653e\u5165\u5b9a\u65f6\u4efb\u52a1\u4e2d\necho &quot;*\/1 * * * * \/bin\/bash -x \/usr\/bin\/virus &amp;&gt;\/tmp\/vinus.log&quot; &gt; \/var\/spool\/cron\/root\n# \u5c06\u811a\u672c\u9501\u4f4f\nchattr +i \/usr\/bin\/virus\ndone<\/code><\/pre>\n<\/li>\n<li>\n<p>\u9501\u5b9a\u7be1\u6539\u6587\u4ef6\uff0c\u7136\u540e\u6740\u6b7b\u75c5\u6bd2<\/p>\n<pre><code class=\"language-bash\">chattr +i \/var\/spool\/cron\/root\necho &quot;hello web server&quot; \/var\/www\/html\/index.html\nchattr +i \/var\/www\/html\/index.html\nkill $(ps -ef | grep virus | grep -v grep | awk &#039;{print $2}&#039;)<\/code><\/pre>\n<\/li>\n<\/ol>\n<h3>\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650<\/h3>\n<h4>\u4ec0\u4e48\u662f\u9ed8\u8ba4\u6743\u9650<\/h4>\n<ul>\n<li>\n<p>\u9ed8\u8ba4\u6743\u9650\uff1a\u6307\u7528\u6237\u5728\u521b\u5efa\u6587\u4ef6\u6216\u76ee\u5f55\u65f6\uff0c\u9ed8\u8ba4\u5206\u914d\u7ed9\u6587\u4ef6\u6216\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650<\/p>\n<h4>\u9ed8\u8ba4\u6743\u9650\u7684\u7531\u6765<\/h4>\n<\/li>\n<li>\n<p>\u80cc\u666f<\/p>\n<ul>\n<li>\u7528\u6237\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\u7684\u9ed8\u8ba4\u8bbf\u95ee\u6743\u9650\u4e3a\uff1a<code>rw-rw-rw-<\/code>(\u516b\u8fdb\u5236\u503c666)<\/li>\n<li>\u7528\u6237\u521b\u5efa\u4e00\u4e2a\u76ee\u5f55\u7684\u9ed8\u8ba4\u8bbf\u95ee\u6743\u9650\u4e3a\uff1a<code>rwxrwxrwx<\/code>(\u516b\u8fdb\u5236\u503c777)<\/li>\n<li>\u4f46\u6700\u7ec8\u521b\u5efa\u51fa\u6765\u7684\u6587\u4ef6\u6743\u9650\u662f644\uff0c\u76ee\u5f55\u662f755\uff0c\u4e3a\u4ec0\u4e48\u76ee\u5f55\u4e0d\u662f777\uff0c\u6587\u4ef6\u4e0d\u662f666\u5462\uff1f<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u5206\u6790<\/p>\n<ul>\n<li>\u56e0\u4e3a\u7cfb\u7edf\u521b\u5efa\u6587\u4ef6\u6216\u76ee\u5f55\u53d7<code>UMASK<\/code>\u63a7\u5236\uff0c\u6bd4\u5982<code>UMASK<\/code>\u8bbe\u7f6e\u4e3a\uff1a022<\/li>\n<li>\u90a3\u4e48\u521b\u5efa\u51fa\u6765\u7684\u6587\u4ef6\u6743\u9650\u662f644\uff0c\u76ee\u5f55\u662f755<\/li>\n<li>\u76ee\u5f55\uff1a777 - 022 = 755\uff0c\u6700\u7ec8\u521b\u5efa\u51fa\u6765\u7684\u76ee\u5f55\u6743\u9650<\/li>\n<li>\u6587\u4ef6\uff1a666 - 022 = 644\uff0c\u6700\u7ec8\u521b\u5efa\u51fa\u6765\u7684\u6587\u4ef6\u6743\u9650<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>\u7ed3\u8bba<br \/>\n<code>UMASK<\/code>\u8868\u793a\u8981\u51cf\u6389\u7684\u6743\u9650<\/p>\n<\/li>\n<\/ul>\n<h4>\u7cfb\u7edf\u9ed8\u8ba4\u6743\u9650\u914d\u7f6e\u6587\u4ef6<\/h4>\n<ul>\n<li>\n<p>\u4e3a\u4ec0\u4e48\u9ed8\u8ba4<code>root<\/code>\u7528\u6237\u7684<code>UMASK<\/code>\u4e3a022\uff0c\u5728\u7cfb\u7edf\u54ea\u4e2a\u914d\u7f6e\u6587\u4ef6\u6709\u8bbe\u5b9a\u5462<\/p>\n<ul>\n<li>\u5f53\u7528\u6237\u767b\u5f55\u7cfb\u7edf\u65f6\uff0c\u4f1a\u52a0\u8f7d<code>\/etc\/profile<\/code>\u73af\u5883\u53d8\u91cf\u6587\u4ef6<\/li>\n<li>\u5728\u8be5\u914d\u7f6e\u6587\u4ef6\u4e2d\u6709\u4e00\u6761<code>UMASK<\/code>\u7684\u5224\u65ad\u8bed\u53e5<\/li>\n<li>\u5982\u679c\u7528\u6237<code>UID<\/code>\u5c0f\u4e8e199\u90a3\u4e48\u5c06<code>UMASK<\/code>\u521d\u59cb\u5316\u4e3a022<\/li>\n<li>\u5982\u679c\u7528\u6237<code>UID<\/code>\u5927\u4e8e199\u5e76\u4e14\u7ec4\u540d\u79f0\u548c\u7528\u6237\u540d\u79f0\u4e00\u81f4\uff0c\u90a3\u4e48\u5c06<code>UMASK<\/code>\u521d\u59cb\u5316\u4e3a002<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><code>UMASK<\/code>\u5224\u65ad\u8bed\u53e5\u5982\u4e0b\uff1a<\/p>\n<pre><code class=\"language-bash\">vim \/etc\/profile\nif [ $UID -gt 199 ] &amp;&amp; [ &quot;`\/usr\/bin\/id -gn`&quot; = &quot;`\/usr\/bin\/id -un`&quot; ]; then\numask 002\nelse\numask 022\nfi<\/code><\/pre>\n<\/li>\n<\/ul>\n<h4>\u9ed8\u8ba4\u6743\u9650\u7684\u8ba1\u7b97\u516c\u5f0f<\/h4>\n<pre><code class=\"language-bash\"># \u5047\u8bbeumask\u7684\u503c\u4e3a\uff1a022\uff08\u6240\u6709\u4f4d\u6570\u4e3a\u5076\u6570\uff09\n# \u6587\u4ef6\u7684\u8d77\u59cb\u6743\u9650\u503c\n666 - 022 = 644\n777 - 022 = 755\n# \u5047\u8bbeumask\u7684\u503c\u4e3a\uff1a045\uff08\u5176\u4ed6\u7528\u6237\u7ec4\u4f4d\u4e3a\u57fa\u6570\uff09\n# \u8ba1\u7b97\u51fa\u6765\u7684\u6743\u9650\uff0c\u7531\u4e8eumask\u7684\u6700\u540e\u4e00\u4f4d\u6570\u5b57\u662f5\uff0c\u6240\u4ee5\u5728\u5176\u4ed6\u7528\u6237\u7ec4\u4f4d\u518d\u52a01\n666 - 045 = 621 + 1 = 622\n777 - 045 = 732\n# umask\u6240\u6709\u4f4d\u6570\u4e3a\u5076\u6570\u65f6\n# umask044\n# mkdir d044 \u76ee\u5f55\u6743\u9650\u4e3a 777 - 044 = 733\n# touch f044 \u6587\u4ef6\u6743\u9650\u4e3a 666 - 044 = 622\n# umask\u90e8\u5206\u4f4d\u6570\u4e3a\u5947\u6570\u65f6\n# umask023\n# mkdir d023 \u76ee\u5f55\u6743\u9650\u4e3a 777 - 023 = 754\n# touch f023 \u6587\u4ef6\u6743\u9650\u4e3a 666 - 023 = 643 + 001 = 644\n# umask\u90e8\u5206\u4f4d\u6570\u4e3a\u5947\u6570\u65f6\n# umask032\n# mkdir d032 \u76ee\u5f55\u6743\u9650\u4e3a 777 - 032 = 745\n# touch f023 \u6587\u4ef6\u6743\u9650\u4e3a 666 - 032 = 634 + 010 = 644\n# umask\u6240\u6709\u4f4d\u6570\u4e3a\u5947\u6570\u65f6\n# umask035\n# mkdir d023 \u76ee\u5f55\u6743\u9650\u4e3a 777 - 035 = 742\n# touch f023 \u6587\u4ef6\u6743\u9650\u4e3a 666 - 035 = 631 + 011 = 642<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\u4ef6\u6743\u9650\u4ecb\u7ecd \u4ec0\u4e48\u662f\u6743\u9650 \u6743\u9650\u662f\u7528\u6765\u7ea6\u675f\u7528\u6237\u80fd\u5bf9\u7cfb\u7edf\u6240\u505a\u7684\u64cd\u4f5c \u6216\u8005\u8bf4\uff0c\u6743\u9650\u662f\u67d0\u4e2a\u6307\u5b9a\u7684\u7528\u6237\u5177\u6709\u7279\u5b9a\u7684\u7cfb\u7edf\u8d44\u6e90&#8230; &raquo; <a class=\"read-more-link\" href=\"http:\/\/blue.yn.cn\/?p=305\">\u9605\u8bfb\u5168\u6587<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-305","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/305","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=305"}],"version-history":[{"count":19,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/305\/revisions"}],"predecessor-version":[{"id":1818,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=\/wp\/v2\/posts\/305\/revisions\/1818"}],"wp:attachment":[{"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=305"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=305"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blue.yn.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=305"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}