1、显示/etc/rc.d/rc.sysinit文件中以不区分大小的h开头的行;
cat /etc/rc.d/rc.sysinit |grep -E "^(h|H)"
2、显示/etc/passwd中以sh结尾的行;
grep sh$ /etc/passwd
3、显示/etc/fstab中以#开头,且后面跟一个或多个空白字符,而后又跟了任意非空白字符的行;
grep -E "^#[[:space:]]+[^[:space:]]*" /etc/fstab
4、查找/etc/rc.d/rc.local中包含“以to开始并以to结尾”的字串行;
egrep -w "(to).*\1" /etc/rc.d/rc.local
egrep -w "(to).*(to)" /etc/rc.d/rc.local
5、查找/etc/inittab中含有“以s开头,并以d结尾的单词”模式的行;
egrep -w "s[a-z]*d" /etc/inittab
6、查找ifconfig命令结果中的1-255之间的整数;
ifconfig | egrep -w "[1-9]|[1-9][0-9]|1[0-9][0-9]|2[0-5][0-5]"
7、显示/var/log/secure文件中包含“Failed”或“FAILED”的行;
egrep "(FAILED|Failed)" /var/log/secure
8、在/etc/passwd中取出默认shell为bash的行;
grep bash /etc/passwd
9、以长格式列出/etc/目录下以ns开头、.conf结尾的文件信息;
find /etc -name "ns*.conf" | xargs ls -l
10、高亮显示passwd文件中冒号,及其两侧的字符;
grep ".:." /etc/passwd