linux用户管理用户授权命令sudo,visudo

雨点打透心脏的1/2处 2021-10-19 22:38 811阅读 0赞

## 1. sudo ##

sudo 可以让普通用户可以拥有root权限去执行命令  
sudo的配置文件/etc/sudoers

## 2. visduo ##

通过visudo 编辑/etc/sudoers，可以检查语法  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 1]  
给**用户组**授权在前面加%  
如果希望授权用户有所有权限，**可执行命令就给ALL**，希望使用sudo时不输入密码，就加入NOPASSWD: ALL  
![20190817104254316.png][]  
编辑完成之后，检查语法：visudo -c

[root@localhost ~]# visudo -c
    /etc/sudoers: parsed OK
    [root@localhost ~]

切换用户后，查看用户拥有的sudo权限，**sudo -l**

[xh@localhost ~]$ sudo -l  
    [sudo] password for xh: 
    Matching Defaults entries for xh on this host:
        requiretty, !visiblepw, always_set_home, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin
    
    User xh may run the following commands on this host:
        (ALL) /usr/sbin/useradd

普通用户xh拥有的创建用户的权限   (ALL) /usr/sbin/useradd

## 3.sudo的使用 ##

之前在sudoers里面授权了普通用户xh具有创建用户的权限，具体使用：

[xh@localhost ~]$ sudo useradd xiehao
    [sudo] password for xh: 
    [xh@localhost ~]$ cd /home/
    [xh@localhost home]$ ll
    total 20
    drwxr-xr-x.  4 root   root   4096 Jul 11 17:39 liyi
    drwx------   4 xh     xh     4096 Aug 11 21:25 xh
    drwx------   4 xiehao xiehao 4096 Aug 17 11:22 xiehao
    drwx------. 26 xm     xm     4096 Jul 16 14:55 xm
    drwx------   4 xq     xq     4096 Aug 17 10:25 xq
    [xh@localhost home]$

## 4.深入讲解 ##

**/etc/sudoers配置文件中别名的知识**  
4.1 主机别名  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][20190817113952303.png]  
4.2 用户别名  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 3]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 4]  
4.3 用户身份别名  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 5]  
4.4命令别名  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 6]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 7]  
root ALL=(ALL) ALL 第三个ALL的位置就是Cmnd\_Alias别名的应用位置。

回顾一下别名和具体授权配置的关系，sudo授权  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 9]  
**学习案例：**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 10]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 11]  
**查看权限sudo -l**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 12]

## 5.注意事项 ##

![zhuyish][]

## 6. sudo审计 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 13]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 14]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 15][运维工具汇总][Link 1]/images/20211019/1f4c5957108e45a296aaf68f287c880c.png

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70]: /images/20211019/c8850743c2be4a25b52e433d7deaa98a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 1]: /images/20211019/7d99d1b16a554fbe9b67846338f24e33.png
[20190817104254316.png]: /images/20211019/635ce5d9e17a44b38907c820535ea64b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 2]: /images/20211019/bb8057bc967a4651a33e84a6cbbef073.png
[20190817113952303.png]: /images/20211019/a79f316f6952490191d4f62428982da1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 3]: /images/20211019/9f4cb0de58ee40af9b4bb0e3cfa1ac4d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 4]: /images/20211019/668c3ffe56f54ace9f6979c013cb8f56.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 5]: /images/20211019/7641c5d9c90143a09c3e9079520f92a9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 6]: /images/20211019/736b4169bd0d4f70b00600e76ab87966.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 7]: /images/20211019/ef39e53f4a874d3f9a697918a1f81a08.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 8]: /images/20211019/29bad29c84184168a6e71508f25844c5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 9]: /images/20211019/cf16b5fcc7f54e7ebfb0eeef1c13d6b6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 10]: /images/20211019/ceed7183f619467c91d413ad4024c6b2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 11]: /images/20211019/ddee01251453415783d19ca711cc2581.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 12]: /images/20211019/7c3bc0c48d1d49d994d55bbd054913a9.png
[zhuyish]: /images/20211019/da03907d71db4c8e91af19908801a64f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 13]: /images/20211019/06ee0ef3c20943b0a3e083ea80c4b555.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 14]: /images/20211019/e0a759a5075144c3b0cf64db0915dfc1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 15]: https://img-blog.csdnimg.cn/20190817194236717.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ==,size_16,color_FFFFFF,t_70
[Link 1]: /images/20211019/1f4c5957108e45a296aaf68f287c880c.png