Yadda ake Kashe Kashewa da Sake yin Dokokin a Linux

Umurnin rufewa yana tsara lokaci don kunna tsarin Linux, ana iya amfani da shi don dakatarwa, kashewa ko sake kunna injin lokacin da aka kira shi tare da takamaiman zaɓuɓɓuka kuma sake kunnawa yana ba da umarnin tsarin don sake farawa.

Wasu Linux distros irin su Ubuntu, Linux Mint, Mandriva kawai in faɗi amma kaɗan, suna ba da damar sake kunnawa/dakatarwa/rufe tsarin azaman mai amfani na yau da kullun, ta tsohuwa. Wannan ba kyakkyawan saiti ba ne musamman akan sabobin, dole ne ya zama wani abu don damuwa musamman ga mai sarrafa tsarin.

A cikin wannan labarin, za mu nuna yadda ake kashe kashewa da sake yin umarni don masu amfani na yau da kullun a cikin Linux.

Kashe Kashewa da Sake yi Dokokin a Linux

Hanya mafi sauƙi don kashe umarnin rufewa da sake kunnawa ta amfani da fayil ɗin /etc/sudoers, anan zaku iya tantance mai amfani (tecmint) ko rukuni (masu haɓakawa) waɗanda ba a basu izinin aiwatar da waɗannan umarni ba.

# vi /etc/sudoers

Ƙara waɗannan layukan zuwa sashin Laƙabi.

Cmnd_Alias     SHUTDOWN = /sbin/shutdown,/sbin/reboot,/sbin/halt,/sbin/poweroff

# User privilege specification
tecmint   ALL=(ALL:ALL) ALL, !SHUTDOWN

# Allow members of group sudo to execute any command
%developers  ALL=(ALL:ALL) ALL,  !SHUTDOWN

Yanzu gwada aiwatar da kashewa da sake yin umarni azaman mai amfani na al'ada (tecmint).

Wata hanya ita ce cire izinin aiwatarwa akan kashewa da sake yin umarni ga duk masu amfani banda tushen.

# chmod o-x /sbin/shutdown
# chmod o-x /sbin/reboot

Lura: A ƙarƙashin systemd, waɗannan fayilolin (/ sbin/rufewa,/sbin/sake yi,/sbin/halt,/sbin/poweroff) hanyoyin haɗin gwiwa ne kawai zuwa/bin/systemctl:

# ls -l /sbin/shutdown
# ls -l /sbin/reboot
# ls -l /sbin/halt
# ls -l /sbin/poweroff

Don hana sauran masu amfani gudanar da waɗannan umarni, kawai za ku cire izinin aiwatarwa kamar yadda aka bayyana a sama, amma wannan ba shi da tasiri a ƙarƙashin systemd. Kuna iya cire izinin aiwatarwa akan /bin/systemctl ma'ana duk sauran masu amfani sai tushen kawai systemctl.

# chmod  o-x /bin/systemctl

Hakanan kuna iya son koyon yadda ake kashe wasu ayyuka kamar SSH tushen shiga da iyakance damar SSH, SELinux, sabis ɗin da ba'a so a cikin Linux ta karanta ta waɗannan jagororin:

  1. Yadda ake kunnawa da kashe Tushen Login a Ubuntu
  2. Yadda ake kashe SELinux na ɗan lokaci ko na dindindin a cikin RHEL/CentOS 7/6
  3. A kashe ko Kunna SSH Tushen Login kuma Iyakance Samun SSH a Linux
  4. Yadda ake Tsayawa da Kashe ayyukan da ba'a so daga tsarin Linux

Shi ke nan! A cikin wannan labarin, mun nuna yadda ake kashe kashewa da sake yin umarni ga masu amfani da tsarin na yau da kullun a cikin Linux. Shin kun san wata hanyar yin wannan, raba shi tare da mu a cikin sharhi.