{"id":61548,"date":"2025-04-29T13:43:57","date_gmt":"2025-04-29T05:43:57","guid":{"rendered":"https:\/\/fwq.ai\/blog\/61548\/"},"modified":"2025-04-29T13:43:57","modified_gmt":"2025-04-29T05:43:57","slug":"%e5%a6%82%e4%bd%95%e4%bd%bf%e7%94%a8%e6%96%87%e4%bb%b6%e5%ae%8c%e6%95%b4%e6%80%a7%e6%a3%80%e6%9f%a5%e5%9c%a8centos%e7%b3%bb%e7%bb%9f%e4%b8%8a%e6%a3%80%e6%b5%8b%e6%96%87%e4%bb%b6%e4%bf%ae%e6%94%b9-2","status":"publish","type":"post","link":"https:\/\/fwq.ai\/blog\/61548\/","title":{"rendered":"\u5982\u4f55\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5728CentOS\u7cfb\u7edf\u4e0a\u68c0\u6d4b\u6587\u4ef6\u4fee\u6539"},"content":{"rendered":"<p>\u5982\u4f55\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5728 centos \u7cfb\u7edf\u4e0a\u68c0\u6d4b\u6587\u4ef6\u4fee\u6539<\/p>\n<p>\u5bfc\u8a00\uff1a<br \/>\u5728\u73b0\u4ee3\u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u4e2d\uff0c\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u662f\u4fdd\u8bc1\u7cfb\u7edf\u5b89\u5168\u6027\u7684\u91cd\u8981\u624b\u6bb5\u4e4b\u4e00\u3002\u901a\u8fc7\u5bf9\u7cfb\u7edf\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u8fdb\u884c\u5468\u671f\u6027\u7684\u68c0\u67e5\uff0c\u53ef\u4ee5\u53ca\u65f6\u53d1\u73b0\u5e76\u4fee\u590d\u88ab\u7be1\u6539\u6216\u7834\u574f\u7684\u6587\u4ef6\uff0c\u9632\u6b62\u7cfb\u7edf\u906d\u53d7\u672a\u77e5\u7684\u5b89\u5168\u5a01\u80c1\u3002\u5728\u672c\u6587\u4e2d\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u5982\u4f55\u5728 CentOS \u7cfb\u7edf\u4e0a\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u529f\u80fd\u3002<\/p>\n<p>\u4e00\u3001CentOS \u7cfb\u7edf\u4e2d\u7684\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5de5\u5177<br \/>CentOS \u7cfb\u7edf\u81ea\u5e26\u4e86\u4e00\u4e2a\u5f3a\u5927\u7684\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5de5\u5177\u2014\u2014 tripwire\u3002\u8be5\u5de5\u5177\u53ef\u4ee5\u5bf9\u6307\u5b9a\u7684\u6587\u4ef6\u8fdb\u884c\u54c8\u5e0c\u503c\u8ba1\u7b97\uff0c\u5e76\u5c06\u7ed3\u679c\u4fdd\u5b58\u5728\u6587\u4ef6\u6570\u636e\u5e93\u4e2d\u3002\u5f53\u6587\u4ef6\u88ab\u4fee\u6539\u6216\u6539\u53d8\u54c8\u5e0c\u503c\u65f6\uff0ctripwire \u5c06\u4f1a\u53d1\u51fa\u8b66\u62a5\u5e76\u63d0\u9192\u7ba1\u7406\u5458\u8fdb\u884c\u5904\u7406\u3002<\/p>\n<p>\u4e8c\u3001\u5b89\u88c5\u4e0e\u914d\u7f6e tripwire<\/p>\n<ol>\n<li>\n<p>\u5b89\u88c5 tripwire\uff1a<\/p>\n<pre>sudo yum install tripwire<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<li>\n<p>\u521d\u59cb\u5316 tripwire\uff1a<\/p>\n<pre>sudo tripwire-setup-keyfiles\nsudo tripwire --init<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<li>\u914d\u7f6e\u6587\u4ef6\uff08\/etc\/tripwire\/twcfg.txt\uff09\u4e2d\u7684\u53c2\u6570\u8bbe\u7f6e\uff1a<\/li>\n<li>ROOT\uff1a\u6839\u76ee\u5f55\u7684\u8def\u5f84\uff0c\u9ed8\u8ba4\u4e3a \/\uff0c\u5982\u975e\u7279\u6b8a\u9700\u6c42\uff0c\u4e00\u822c\u4e0d\u9700\u8981\u4fee\u6539\u3002<\/li>\n<li>POLFILE\uff1a\u7b56\u7565\u6587\u4ef6\u7684\u8def\u5f84\uff0c\u8be5\u6587\u4ef6\u5b9a\u4e49\u4e86\u9700\u8981\u68c0\u67e5\u7684\u6587\u4ef6\u6216\u76ee\u5f55\uff0c\u9ed8\u8ba4\u4e3a \/etc\/tripwire\/twpol.txt\u3002<\/li>\n<li>SITEKEYFILE\uff1a\u5b58\u653e tripwire \u5bc6\u94a5\u7684\u8def\u5f84\uff0c\u9ed8\u8ba4\u4e3a \/etc\/tripwire\/site.key\u3002<\/li>\n<\/ol>\n<p>\u4e09\u3001\u521b\u5efa\u7b56\u7565\u6587\u4ef6\uff08\/etc\/tripwire\/twpol.txt\uff09<br \/>\u6839\u636e\u5b9e\u9645\u9700\u6c42\uff0c\u53ef\u4ee5\u5728\u7b56\u7565\u6587\u4ef6\u4e2d\u6307\u5b9a\u9700\u8981\u8fdb\u884c\u5b8c\u6574\u6027\u68c0\u67e5\u7684\u6587\u4ef6\u6216\u76ee\u5f55\u3002\u4ee5\u68c0\u67e5 \/etc\/passwd \u6587\u4ef6\u4e3a\u4f8b\uff0c\u7b56\u7565\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n<pre>(\n    rulename = \"etc_passwd\",         # \u89c4\u5219\u540d\u79f0\n    severity = $(SIG_HI),            # \u4e25\u91cd\u7ea7\u522b\n    emailto = \"admin@example.com\",   # \u53d1\u9001\u8b66\u62a5\u7684\u90ae\u4ef6\u5730\u5740\n    files = (\n        \"\/etc\/passwd\",               # \u9700\u8981\u68c0\u67e5\u7684\u6587\u4ef6\u8def\u5f84\n    ),\n)<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<p>\u56db\u3001\u751f\u6210\u914d\u7f6e\u6587\u4ef6\u548c\u6570\u636e\u5e93\u6587\u4ef6<\/p>\n<ol>\n<li>\n<p>\u751f\u6210\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n<pre>sudo twadmin --create-cfgfile -P tripwire.cfg<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<li>\n<p>\u751f\u6210\u6570\u636e\u5e93\u6587\u4ef6\uff1a<\/p>\n<pre>sudo tripwire --update -P tripwire.cfg \/etc\/tripwire\/twpol.txt<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<\/ol>\n<p>\u4e94\u3001\u5b9a\u671f\u68c0\u67e5\u548c\u81ea\u52a8\u5316<\/p>\n<ol>\n<li>\n<p>\u624b\u52a8\u8fd0\u884c\u68c0\u67e5\uff1a<\/p>\n<pre>sudo tripwire --check -P tripwire.cfg<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<li>\u5236\u5b9a\u5b9a\u671f\u4efb\u52a1\uff1a<br \/>\u4f7f\u7528 cron \u6216\u5176\u4ed6\u5b9a\u65f6\u4efb\u52a1\u5de5\u5177\uff0c\u53ef\u4ee5\u5b9a\u671f\u8fd0\u884c tripwire \u7684\u68c0\u67e5\u547d\u4ee4\uff0c\u4ee5\u5b9e\u73b0\u81ea\u52a8\u68c0\u67e5\u548c\u62a5\u544a\u3002<\/li>\n<\/ol>\n<p>\u516d\u3001\u64cd\u4f5c\u793a\u4f8b<\/p>\n<ol>\n<li>\n<p>\u67e5\u770b tripwire \u7684\u8be6\u7ec6\u68c0\u67e5\u7ed3\u679c\uff1a<\/p>\n<pre>sudo tripwire --check | more<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/li>\n<li>\u67e5\u770b\u8b66\u62a5\u65e5\u5fd7\uff1a<br \/>\u8b66\u62a5\u65e5\u5fd7\u9ed8\u8ba4\u4fdd\u5b58\u5728 \/var\/lib\/tripwire\/  &#8211;  .twr \u6587\u4ef6\u4e2d\u3002   <\/li>\n<\/ol>\n<p>\u7ed3\u8bed\uff1a<br \/>\u901a\u8fc7\u4f7f\u7528 tripwire \u5de5\u5177\uff0c\u6211\u4eec\u53ef\u4ee5\u5b9e\u73b0\u5728 CentOS \u7cfb\u7edf\u4e0a\u5bf9\u6587\u4ef6\u5b8c\u6574\u6027\u7684\u81ea\u52a8\u68c0\u67e5\u548c\u76d1\u63a7\u3002\u8fd9\u6709\u52a9\u4e8e\u6211\u4eec\u4fdd\u62a4\u7cfb\u7edf\u7684\u5b89\u5168\u6027\uff0c\u53ca\u65f6\u53d1\u73b0\u5e76\u5904\u7406\u4efb\u4f55\u6f5c\u5728\u7684\u5b89\u5168\u95ee\u9898\u3002\u540c\u65f6\uff0c\u5408\u7406\u8bbe\u7f6e\u68c0\u67e5\u7b56\u7565\u548c\u5b9a\u671f\u81ea\u52a8\u5316\uff0c\u53ef\u4ee5\u51cf\u8f7b\u7ba1\u7406\u5458\u7684\u64cd\u4f5c\u538b\u529b\uff0c\u63d0\u9ad8\u5de5\u4f5c\u6548\u7387\u3002\u5e0c\u671b\u672c\u6587\u5bf9\u60a8\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5728 CentOS \u7cfb\u7edf\u4e0a\u68c0\u6d4b\u6587\u4ef6\u4fee\u6539\u6709\u6240\u5e2e\u52a9\u3002<\/p>\n<p>\u4ee5\u4e0a\u5c31\u662f\u5982\u4f55\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5728CentOS\u7cfb\u7edf\u4e0a\u68c0\u6d4b\u6587\u4ef6\u4fee\u6539\u7684\u8be6\u7ec6\u5185\u5bb9\uff0c\u66f4\u591a\u8bf7\u5173\u6ce8FDCServers\u5176\u5b83\u76f8\u5173\u6587\u7ae0\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5982\u4f55\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5728 centos \u7cfb\u7edf\u4e0a\u68c0\u6d4b\u6587\u4ef6\u4fee\u6539 \u5bfc\u8a00\uff1a\u5728\u73b0\u4ee3\u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u4e2d\uff0c\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u662f\u4fdd\u8bc1\u7cfb\u7edf\u5b89\u5168\u6027\u7684\u91cd\u8981\u624b\u6bb5\u4e4b\u4e00\u3002\u901a\u8fc7\u5bf9\u7cfb\u7edf\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u8fdb\u884c\u5468\u671f\u6027\u7684\u68c0\u67e5\uff0c\u53ef\u4ee5\u53ca\u65f6\u53d1\u73b0\u5e76\u4fee\u590d\u88ab\u7be1\u6539\u6216\u7834\u574f\u7684\u6587\u4ef6\uff0c\u9632\u6b62\u7cfb\u7edf\u906d\u53d7\u672a\u77e5\u7684\u5b89\u5168\u5a01\u80c1\u3002\u5728\u672c\u6587\u4e2d\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u5982\u4f55\u5728 CentOS \u7cfb\u7edf\u4e0a\u4f7f\u7528\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u529f\u80fd\u3002 \u4e00\u3001CentOS \u7cfb\u7edf\u4e2d\u7684\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5de5\u5177CentOS \u7cfb\u7edf\u81ea\u5e26\u4e86\u4e00\u4e2a\u5f3a\u5927\u7684\u6587\u4ef6\u5b8c\u6574\u6027\u68c0\u67e5\u5de5\u5177\u2014\u2014 tripwire\u3002\u8be5\u5de5\u5177\u53ef\u4ee5\u5bf9\u6307\u5b9a\u7684\u6587\u4ef6\u8fdb\u884c\u54c8\u5e0c\u503c\u8ba1\u7b97\uff0c\u5e76\u5c06\u7ed3\u679c\u4fdd\u5b58\u5728\u6587\u4ef6\u6570\u636e\u5e93\u4e2d\u3002\u5f53\u6587\u4ef6\u88ab\u4fee\u6539\u6216\u6539\u53d8\u54c8\u5e0c\u503c\u65f6\uff0ctripwire \u5c06\u4f1a\u53d1\u51fa\u8b66\u62a5\u5e76\u63d0\u9192\u7ba1\u7406\u5458\u8fdb\u884c\u5904\u7406\u3002 \u4e8c\u3001\u5b89\u88c5\u4e0e\u914d\u7f6e tripwire \u5b89\u88c5 tripwire\uff1a sudo yum install tripwire \u767b\u5f55\u540e\u590d\u5236 \u521d\u59cb\u5316 tripwire\uff1a sudo tripwire-setup-keyfiles sudo tripwire &#8211;init \u767b\u5f55\u540e\u590d\u5236 \u914d\u7f6e\u6587\u4ef6\uff08\/etc\/tripwire\/twcfg.txt\uff09\u4e2d\u7684\u53c2\u6570\u8bbe\u7f6e\uff1a ROOT\uff1a\u6839\u76ee\u5f55\u7684\u8def\u5f84\uff0c\u9ed8\u8ba4\u4e3a \/\uff0c\u5982\u975e\u7279\u6b8a\u9700\u6c42\uff0c\u4e00\u822c\u4e0d\u9700\u8981\u4fee\u6539\u3002 POLFILE\uff1a\u7b56\u7565\u6587\u4ef6\u7684\u8def\u5f84\uff0c\u8be5\u6587\u4ef6\u5b9a\u4e49\u4e86\u9700\u8981\u68c0\u67e5\u7684\u6587\u4ef6\u6216\u76ee\u5f55\uff0c\u9ed8\u8ba4\u4e3a \/etc\/tripwire\/twpol.txt\u3002 SITEKEYFILE\uff1a\u5b58\u653e tripwire \u5bc6\u94a5\u7684\u8def\u5f84\uff0c\u9ed8\u8ba4\u4e3a \/etc\/tripwire\/site.key\u3002 \u4e09\u3001\u521b\u5efa\u7b56\u7565\u6587\u4ef6\uff08\/etc\/tripwire\/twpol.txt\uff09\u6839\u636e\u5b9e\u9645\u9700\u6c42\uff0c\u53ef\u4ee5\u5728\u7b56\u7565\u6587\u4ef6\u4e2d\u6307\u5b9a\u9700\u8981\u8fdb\u884c\u5b8c\u6574\u6027\u68c0\u67e5\u7684\u6587\u4ef6\u6216\u76ee\u5f55\u3002\u4ee5\u68c0\u67e5 \/etc\/passwd \u6587\u4ef6\u4e3a\u4f8b\uff0c\u7b56\u7565\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b\uff1a ( rulename = &#8220;etc_passwd&#8221;, # \u89c4\u5219\u540d\u79f0 severity = $(SIG_HI), # \u4e25\u91cd\u7ea7\u522b emailto = &#8220;admin@example.com&#8221;, # [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-61548","post","type-post","status-publish","format-standard","hentry","category-os"],"_links":{"self":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/61548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/comments?post=61548"}],"version-history":[{"count":0,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/61548\/revisions"}],"wp:attachment":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/media?parent=61548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/categories?post=61548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/tags?post=61548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}