红帽培训笔记3day

查看和控制系统服务

在RHEL6之前的版本，对系统服务控制使用命令
service   

service sshd status/start/stop/restart/reload

chkconfig  --list  sshd

从RHEL7开始，控制系统服务的命令   systemctl


[root@abc ~]# systemctl status sshd
● sshd.service - OpenSSH server daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset>         enabled   开机自启动   disabled  开机不启动
   Active: active (running) since Wed 2021-11-03 10:28:36 CST; 1 day 23h ago
     Docs: man:sshd(8)
           man:sshd_config(5)
 Main PID: 819 (sshd)
    Tasks: 1 (limit: 11345)
   Memory: 7.1M
   CGroup: /system.slice/sshd.service
           └─819 /usr/sbin/sshd -D -oCiphers=aes256-gcm@openssh.com,chacha20-po>

Nov 04 13:38:39 abc sshd[25913]: Accepted password for root from 172.25.250.250>
Nov 04 13:38:39 abc sshd[25913]: pam_unix(sshd:session): session opened for use>
Nov 04 15:04:10 abc sshd[26576]: Accepted password for root from 172.25.250.250>
Nov 04 15:04:10 abc sshd[26576]: pam_unix(sshd:session): session opened for use>
Nov 04 15:04:39 abc sshd[26629]: Accepted password for root from 172.25.250.250>
Nov 04 15:04:39 abc sshd[26629]: pam_unix(sshd:session): session opened for use>
Nov 04 15:06:34 abc sshd[26670]: Accepted password for root from 172.25.250.250>
Nov 04 15:06:34 abc sshd[26670]: pam_unix(sshd:session): session opened for use>
Nov 05 09:36:01 abc sshd[27215]: Accepted password for root from 172.25.250.250>
Nov 05 09:36:01 abc sshd[27215]: pam_unix(sshd:session): session opened for use>
lines 1-21/21 (END)




将服务设置为开机自启动，并直接启动起来
[root@abc ~]# systemctl enable atd --now
                        stop,start,restart,reload

                        
[root@abc ~]# systemctl is-active atd
active
[root@abc ~]# systemctl is-enabled atd
enabled

查询系统启动级别     init 0 1 2 3 4 5 6
[root@abc ~]# systemctl get-default 
multi-user.target     init 3
[root@abc ~]# 

[root@workstation ~]# systemctl get-default 
graphical.target      init 5
[root@workstation ~]# 

[root@workstation ~]# systemctl set-default multi-user.target    启动时只启动命令行多用户模式
Removed /etc/systemd/system/default.target.
Created symlink /etc/systemd/system/default.target → /usr/lib/systemd/system/multi-user.target.
[root@workstation ~]# 


屏蔽调一个服务  mask

[root@abc ~]# systemctl mask atd
Created symlink /etc/systemd/system/atd.service → /dev/null.
[root@abc ~]# systemctl start atd
Failed to start atd.service: Unit atd.service is masked.
[root@abc ~]# systemctl unmask atd
Removed /etc/systemd/system/atd.service.
[root@abc ~]# systemctl enable atd --now
Created symlink /etc/systemd/system/multi-user.target.wants/atd.service → /usr/lib/systemd/system/atd.service.
[root@abc ~]# 


--------------------------------------------------------------------
ssh 服务的安全性

tcp  22  端口

修改配置文件，更改端口号

vim /etc/ssh/sshd_config 

#
Port 22222
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

需要重启服务

systemctl   restart    sshd


由于系统默认开启了selinux安全组建和firewalld防火墙软件
为了实验效果，可以