自动化selinux以及AWK练习

1、编写脚本selinux.sh，实现开启或禁用SELinux功能

#!/bin/bash

read -p "Please input SElinux statr is start or stop: " SE
SEC=$(sed -rn 's@^SELINUX=(.*)@\1@'p /etc/selinux/config)
if [ $SE == 'start' ];then
        if [ $SEC == 'enforcing' ];then
                echo "Selinux status to enforcing"
        elif [ $SEC == 'disabled' ];then
                sed -ri 's/^SELINUX=(.*)/SELINUX=enforcing/'g /etc/selinux/config && echo "selinux is start"
        fi
elif [ $SE == 'stop' ];then
         if [ $SEC == 'enforcing' ];then
                sed -ri 's/^SELINUX=(.*)/SELINUX=disabled/'g /etc/selinux/config && echo "selinux is stop"
        elif [ $SEC == 'disabled' ];then
                echo "Selinux status to disabled"
        fi
else
        echo "The information you entered is wrong, please re-enter!"
fi

2、统计/etc/fstab文件中每个文件系统类型出现的次数

grep "^UUID" /etc/fstab |awk '{fs[$3]++}END{for(i in fs){print i,fs[i]}}'
grep "^UUID" /etc/fstab |awk '{print $3}'|sort|uniq -c

3、提取出字符串Yd$C@M05MB%9&Bdh7dq+YVixp3vpw中的所有数字

echo "Yd$C@M05MB%9&Bdh7dq+YVixp3vpw" |awk '{gsub(/[^0-9]/,"",$0);print $0}'

4、解决DOS攻击生产案例:根据web日志或者或者网络连接数，监控当某个IP 并发连接数或者短时内PV达到100，即调用防火墙命令封掉对应的IP，监控频 率每隔5分钟。防火墙命令为:iptables -A INPUT -s IP -j REJECT

#! /bin/bash
TMP=/data/tmp.txt
netstat -ant |awk -F'[ :]+' '/ESTABLISHED/{print $6}'|sort|uniq -c >$TMP

while read line
do
        NUM=`echo $line|awk '{print $1}'`
        IP=`echo $line|awk '{print $2}'`
        if [ $NUM -ge 100 ];then
                iptables -A INPUT -s $IP -j REJECT
        echo "$IP is rejected"
        fi
done <$TMP

*/5 * * * * /usr/bin/bash /data/killDOS.sh