shell 安全脚本

HASH值
HASH值与文件名称，时间，大小等信息无关，仅与内容有关

• MD5
• SHA256

[root@zabbix-server day6]# md5sum /etc/passwd
79fe83db4691f58785700e02e3dd2b4a  /etc/passwd
[root@zabbix-server day6]# sha256sum /etc/passwd
112a1a0d9404d157ff13502e54efb2e2c15cc9325ae0c5c13418f3f53f98227e  /etc/passwd

• 数据安全检测脚本

[root@zabbix-server day6]# more data.sh 
#!/bin/bash

for i in $(ls /etc/*.conf)
do
  md5sum $i >> /tmp/data.log
done
[root@zabbix-server day6]# cat /tmp/data.log 
1c9cf478bb79baae4939470b606609d0  /etc/asound.conf
bd71962e53c40611fac2547d579457d1  /etc/brltty.conf

SSH配置

 

[root@zabbix-server day6]# md5sum /etc/passwd
79fe83db4691f58785700e02e3dd2b4a  /etc/passwd
[root@zabbix-server day6]# sha256sum /etc/passwd
112a1a0d9404d157ff13502e54efb2e2c15cc9325ae0c5c13418f3f53f98227e  /etc/passwd
[root@zabbix-server day6]# vi data.sh
[root@zabbix-server day6]# chmod +x data.sh 
[root@zabbix-server day6]# ./data.sh 
[root@zabbix-server day6]# echo $?
0
[root@zabbix-server day6]# more data.sh 
#!/bin/bash

for i in $(ls /etc/*.conf)
do
  md5sum $i >> /tmp/data.log
done
[root@zabbix-server day6]# cat /tmp/data.log 
1c9cf478bb79baae4939470b606609d0  /etc/asound.conf
bd71962e53c40611fac2547d579457d1  /etc/brltty.conf
fcd517a062526b95db1439099d6700ee  /etc/chrony.conf

[root@zabbix-server day6]# more ssh_conf.sh 
#!/bin/bash
#conf="/etc/ssh/sshd_config"
conf="./sshd_config"

sed -i '/^Port/s/22/1122/' $conf
sed -i '/^PermitRootLogin/s/yes/no/' $conf
sed -i '/^UseDNS/s/yes/no/' $conf
sed -i '$a AllowUsers tom' $conf

systemctl restart sshd