{"id":62468,"date":"2025-04-29T10:49:37","date_gmt":"2025-04-29T02:49:37","guid":{"rendered":"https:\/\/fwq.ai\/blog\/62468\/"},"modified":"2025-04-29T10:49:37","modified_gmt":"2025-04-29T02:49:37","slug":"linux%e6%9c%8d%e5%8a%a1%e5%99%a8%e5%ae%89%e5%85%a8%e6%80%a7%e7%9a%84%e5%bf%85%e5%a4%87%e6%8a%80%e8%83%bd%ef%bc%9a%e5%ad%a6%e4%b9%a0%e5%91%bd%e4%bb%a4%e7%9a%84%e4%bd%bf%e7%94%a8%e4%b8%8e%e7%ae%a1-3","status":"publish","type":"post","link":"https:\/\/fwq.ai\/blog\/62468\/","title":{"rendered":"Linux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/img.php.cn\/upload\/article\/000\/465\/014\/169423462895263.jpg\" class=\"aligncenter\" title=\"Linux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406\u63d2\u56fe\" alt=\"Linux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406\u63d2\u56fe\" \/><\/p>\n<p>Linux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406<\/p>\n<p>\u4f5c\u4e3a\u7f51\u7edc\u4e16\u754c\u4e2d\u6700\u53d7\u6b22\u8fce\u548c\u6700\u7a33\u5b9a\u7684\u64cd\u4f5c\u7cfb\u7edf\u4e4b\u4e00\uff0cLinux\u5e7f\u6cdb\u5e94\u7528\u4e8e\u670d\u52a1\u5668\u9886\u57df\u3002\u7136\u800c\uff0c\u4e0e\u5176\u5b83\u64cd\u4f5c\u7cfb\u7edf\u4e00\u6837\uff0cLinux\u670d\u52a1\u5668\u4e5f\u9762\u4e34\u7740\u5404\u79cd\u5b89\u5168\u5a01\u80c1\u3002\u4e3a\u4e86\u786e\u4fdd\u670d\u52a1\u5668\u7684\u5b89\u5168\uff0c\u5b66\u4e60\u5982\u4f55\u6b63\u786e\u4f7f\u7528\u548c\u7ba1\u7406\u547d\u4ee4\u662f\u81f3\u5173\u91cd\u8981\u7684\u3002<\/p>\n<p>\u4e0b\u9762\u5c06\u4ecb\u7ecd\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u548c\u6280\u5de7\uff0c\u5e2e\u52a9\u60a8\u63d0\u9ad8Linux\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\u3002<\/p>\n<ol>\n<li>\u66f4\u65b0\u8f6f\u4ef6<\/li>\n<\/ol>\n<p>\u4fdd\u6301\u64cd\u4f5c\u7cfb\u7edf\u548c\u6240\u6709\u5b89\u88c5\u7684\u8f6f\u4ef6\u66f4\u65b0\u81f3\u6700\u65b0\u7248\u672c\u662f\u4fdd\u6301\u670d\u52a1\u5668\u5b89\u5168\u7684\u5173\u952e\u3002\u901a\u8fc7\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u66f4\u65b0\u8f6f\u4ef6\u5305\uff1a<\/p>\n<pre>sudo apt update\nsudo apt upgrade<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<ol>\n<li>\u5b89\u88c5\u9632\u706b\u5899<\/li>\n<\/ol>\n<p>\u9632\u706b\u5899\u662f\u4fdd\u62a4\u670d\u52a1\u5668\u514d\u53d7\u7f51\u7edc\u653b\u51fb\u7684\u91cd\u8981\u5de5\u5177\u3002\u60a8\u53ef\u4ee5\u4f7f\u7528ufw\u547d\u4ee4\u6765\u8f7b\u677e\u5730\u914d\u7f6e\u548c\u7ba1\u7406\u9632\u706b\u5899\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684ufw\u547d\u4ee4\u793a\u4f8b\uff1a<\/p>\n<ul>\n<li>\u542f\u7528\u9632\u706b\u5899\uff1asudo ufw enable<\/li>\n<li>\u7981\u7528\u9632\u706b\u5899\uff1asudo ufw disable<\/li>\n<li>\u5141\u8bb8\u7279\u5b9a\u7aef\u53e3\uff1asudo ufw allow \u7aef\u53e3\u53f7<\/li>\n<li>\u5141\u8bb8\u7279\u5b9aIP\u5730\u5740\uff1asudo ufw allow from IP\u5730\u5740<\/li>\n<\/ul>\n<ol>\n<li>\u8bbe\u7f6e\u5f3a\u5bc6\u7801<\/li>\n<\/ol>\n<p>\u5728Linux\u670d\u52a1\u5668\u4e0a\u8bbe\u7f6e\u5f3a\u5bc6\u7801\u662f\u786e\u4fdd\u670d\u52a1\u5668\u5b89\u5168\u7684\u91cd\u8981\u6b65\u9aa4\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4fee\u6539\u5bc6\u7801\u7b56\u7565\uff1a<\/p>\n<pre>sudo vi \/etc\/pam.d\/common-password<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<p>\u5728\u6587\u4ef6\u4e2d\u627e\u5230\u201cpassword requisite pam_cracklib.so\u201d\u884c\uff0c\u5e76\u8fdb\u884c\u76f8\u5e94\u66f4\u6539\u3002\u4f8b\u5982\uff0c\u5c06minlen\u53c2\u6570\u66f4\u6539\u4e3a\u8981\u6c42\u7684\u6700\u5c0f\u5bc6\u7801\u957f\u5ea6\uff1a<\/p>\n<pre>password requisite pam_cracklib.so retry=3 minlen=8<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<ol>\n<li>\u4f7f\u7528SSH\u5bc6\u94a5\u8fdb\u884c\u8ba4\u8bc1<\/li>\n<\/ol>\n<p>\u4f7f\u7528SSH\u5bc6\u94a5\u8fdb\u884c\u8ba4\u8bc1\u6bd4\u4f7f\u7528\u5bc6\u7801\u767b\u5f55\u66f4\u5b89\u5168\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210SSH\u5bc6\u94a5\uff1a<\/p>\n<pre>ssh-keygen<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<p>\u7136\u540e\u5c06\u516c\u94a5\u6dfb\u52a0\u5230\u670d\u52a1\u5668\u4e0a\u7684~\/.ssh\/authorized_keys\u6587\u4ef6\u4e2d\u3002<\/p>\n<ol>\n<li>\u7981\u7528\u4e0d\u5fc5\u8981\u7684\u670d\u52a1<\/li>\n<\/ol>\n<p>\u7981\u7528\u4e0d\u5fc5\u8981\u7684\u670d\u52a1\u662f\u51cf\u5c11\u653b\u51fb\u9762\u7684\u4e00\u79cd\u6709\u6548\u65b9\u6cd5\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u67e5\u770b\u5f53\u524d\u6b63\u5728\u8fd0\u884c\u7684\u670d\u52a1\uff1a<\/p>\n<pre>sudo systemctl list-unit-files --type=service<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<p>\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u7981\u7528\u4e0d\u9700\u8981\u7684\u670d\u52a1\uff1a<\/p>\n<pre>sudo systemctl disable \u670d\u52a1\u540d\u79f0<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<ol>\n<li>\u76d1\u63a7\u65e5\u5fd7\u6587\u4ef6<\/li>\n<\/ol>\n<p>\u76d1\u63a7\u670d\u52a1\u5668\u7684\u65e5\u5fd7\u6587\u4ef6\u53ef\u4ee5\u5e2e\u52a9\u60a8\u53ca\u65f6\u53d1\u73b0\u6f5c\u5728\u7684\u5b89\u5168\u95ee\u9898\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u6765\u67e5\u770b\u548c\u76d1\u63a7\u65e5\u5fd7\u6587\u4ef6\uff1a<\/p>\n<ul>\n<li>tail -f \/var\/log\/syslog\uff1a\u5b9e\u65f6\u67e5\u770b\u7cfb\u7edf\u65e5\u5fd7<\/li>\n<li>tail -f \/var\/log\/auth.log\uff1a\u5b9e\u65f6\u67e5\u770b\u8ba4\u8bc1\u65e5\u5fd7<\/li>\n<li>journalctl -u \u670d\u52a1\u540d\u79f0\uff1a\u67e5\u770b\u7279\u5b9a\u670d\u52a1\u7684\u65e5\u5fd7<\/li>\n<\/ul>\n<ol>\n<li>\u6587\u4ef6\u548c\u76ee\u5f55\u6743\u9650<\/li>\n<\/ol>\n<p>\u6b63\u786e\u8bbe\u7f6e\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6743\u9650\u662f\u4fdd\u62a4\u670d\u52a1\u5668\u514d\u53d7\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u7684\u91cd\u8981\u63aa\u65bd\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u6765\u8bbe\u7f6e\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6743\u9650\uff1a<\/p>\n<ul>\n<li>chmod\uff1a\u66f4\u6539\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6743\u9650<\/li>\n<li>chown\uff1a\u66f4\u6539\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6240\u6709\u8005<\/li>\n<li>chgrp\uff1a\u66f4\u6539\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6240\u5c5e\u7ec4<\/li>\n<\/ul>\n<ol>\n<li>\u4f7f\u7528\u5b9a\u671f\u5907\u4efd<\/li>\n<\/ol>\n<p>\u5b9a\u671f\u5907\u4efd\u670d\u52a1\u5668\u6570\u636e\u662f\u9632\u6b62\u6570\u636e\u4e22\u5931\u7684\u5173\u952e\u6b65\u9aa4\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u521b\u5efa\u5b9a\u671f\u5907\u4efd\uff1a<\/p>\n<pre>sudo apt install rsync\nsudo rsync -avz \u6e90\u76ee\u5f55 \u76ee\u6807\u76ee\u5f55<\/pre>\n<p>  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n<p>\u60a8\u53ef\u4ee5\u4f7f\u7528cron\u5b9a\u65f6\u4efb\u52a1\u6765\u81ea\u52a8\u6267\u884c\u5907\u4efd\u3002<\/p>\n<p>\u603b\u7ed3\uff1a<\/p>\n<p>\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u548c\u7ba1\u7406\u662f\u4fdd\u62a4Linux\u670d\u52a1\u5668\u5b89\u5168\u7684\u91cd\u8981\u6280\u80fd\u3002\u672c\u6587\u4ecb\u7ecd\u4e86\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u548c\u6280\u5de7\uff0c\u5305\u62ec\u66f4\u65b0\u8f6f\u4ef6\u3001\u5b89\u88c5\u9632\u706b\u5899\u3001\u8bbe\u7f6e\u5f3a\u5bc6\u7801\u3001\u4f7f\u7528SSH\u5bc6\u94a5\u8fdb\u884c\u8ba4\u8bc1\u3001\u7981\u7528\u4e0d\u5fc5\u8981\u7684\u670d\u52a1\u3001\u76d1\u63a7\u65e5\u5fd7\u6587\u4ef6\u3001\u8bbe\u7f6e\u6587\u4ef6\u548c\u76ee\u5f55\u6743\u9650\u4ee5\u53ca\u4f7f\u7528\u5b9a\u671f\u5907\u4efd\u3002\u901a\u8fc7\u638c\u63e1\u8fd9\u4e9b\u6280\u80fd\uff0c\u60a8\u53ef\u4ee5\u63d0\u9ad8Linux\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\uff0c\u66f4\u597d\u5730\u4fdd\u62a4\u60a8\u7684\u6570\u636e\u548c\u7cfb\u7edf\u514d\u53d7\u6f5c\u5728\u7684\u5a01\u80c1\u3002<\/p>\n<p>\u4ee5\u4e0a\u5c31\u662fLinux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406\u7684\u8be6\u7ec6\u5185\u5bb9\uff0c\u66f4\u591a\u8bf7\u5173\u6ce8FDCServers\u5176\u5b83\u76f8\u5173\u6587\u7ae0\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux\u670d\u52a1\u5668\u5b89\u5168\u6027\u7684\u5fc5\u5907\u6280\u80fd\uff1a\u5b66\u4e60\u547d\u4ee4\u7684\u4f7f\u7528\u4e0e\u7ba1\u7406 \u4f5c\u4e3a\u7f51\u7edc\u4e16\u754c\u4e2d\u6700\u53d7\u6b22\u8fce\u548c\u6700\u7a33\u5b9a\u7684\u64cd\u4f5c\u7cfb\u7edf\u4e4b\u4e00\uff0cLinux\u5e7f\u6cdb\u5e94\u7528\u4e8e\u670d\u52a1\u5668\u9886\u57df\u3002\u7136\u800c\uff0c\u4e0e\u5176\u5b83\u64cd\u4f5c\u7cfb\u7edf\u4e00\u6837\uff0cLinux\u670d\u52a1\u5668\u4e5f\u9762\u4e34\u7740\u5404\u79cd\u5b89\u5168\u5a01\u80c1\u3002\u4e3a\u4e86\u786e\u4fdd\u670d\u52a1\u5668\u7684\u5b89\u5168\uff0c\u5b66\u4e60\u5982\u4f55\u6b63\u786e\u4f7f\u7528\u548c\u7ba1\u7406\u547d\u4ee4\u662f\u81f3\u5173\u91cd\u8981\u7684\u3002 \u4e0b\u9762\u5c06\u4ecb\u7ecd\u4e00\u4e9b\u5e38\u7528\u7684\u547d\u4ee4\u548c\u6280\u5de7\uff0c\u5e2e\u52a9\u60a8\u63d0\u9ad8Linux\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\u3002 \u66f4\u65b0\u8f6f\u4ef6 \u4fdd\u6301\u64cd\u4f5c\u7cfb\u7edf\u548c\u6240\u6709\u5b89\u88c5\u7684\u8f6f\u4ef6\u66f4\u65b0\u81f3\u6700\u65b0\u7248\u672c\u662f\u4fdd\u6301\u670d\u52a1\u5668\u5b89\u5168\u7684\u5173\u952e\u3002\u901a\u8fc7\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u66f4\u65b0\u8f6f\u4ef6\u5305\uff1a sudo apt update sudo apt upgrade \u767b\u5f55\u540e\u590d\u5236 \u5b89\u88c5\u9632\u706b\u5899 \u9632\u706b\u5899\u662f\u4fdd\u62a4\u670d\u52a1\u5668\u514d\u53d7\u7f51\u7edc\u653b\u51fb\u7684\u91cd\u8981\u5de5\u5177\u3002\u60a8\u53ef\u4ee5\u4f7f\u7528ufw\u547d\u4ee4\u6765\u8f7b\u677e\u5730\u914d\u7f6e\u548c\u7ba1\u7406\u9632\u706b\u5899\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684ufw\u547d\u4ee4\u793a\u4f8b\uff1a \u542f\u7528\u9632\u706b\u5899\uff1asudo ufw enable \u7981\u7528\u9632\u706b\u5899\uff1asudo ufw disable \u5141\u8bb8\u7279\u5b9a\u7aef\u53e3\uff1asudo ufw allow \u7aef\u53e3\u53f7 \u5141\u8bb8\u7279\u5b9aIP\u5730\u5740\uff1asudo ufw allow from IP\u5730\u5740 \u8bbe\u7f6e\u5f3a\u5bc6\u7801 \u5728Linux\u670d\u52a1\u5668\u4e0a\u8bbe\u7f6e\u5f3a\u5bc6\u7801\u662f\u786e\u4fdd\u670d\u52a1\u5668\u5b89\u5168\u7684\u91cd\u8981\u6b65\u9aa4\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4fee\u6539\u5bc6\u7801\u7b56\u7565\uff1a sudo vi \/etc\/pam.d\/common-password \u767b\u5f55\u540e\u590d\u5236 \u5728\u6587\u4ef6\u4e2d\u627e\u5230\u201cpassword requisite pam_cracklib.so\u201d\u884c\uff0c\u5e76\u8fdb\u884c\u76f8\u5e94\u66f4\u6539\u3002\u4f8b\u5982\uff0c\u5c06minlen\u53c2\u6570\u66f4\u6539\u4e3a\u8981\u6c42\u7684\u6700\u5c0f\u5bc6\u7801\u957f\u5ea6\uff1a password requisite pam_cracklib.so retry=3 minlen=8 \u767b\u5f55\u540e\u590d\u5236 \u4f7f\u7528SSH\u5bc6\u94a5\u8fdb\u884c\u8ba4\u8bc1 \u4f7f\u7528SSH\u5bc6\u94a5\u8fdb\u884c\u8ba4\u8bc1\u6bd4\u4f7f\u7528\u5bc6\u7801\u767b\u5f55\u66f4\u5b89\u5168\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210SSH\u5bc6\u94a5\uff1a ssh-keygen \u767b\u5f55\u540e\u590d\u5236 \u7136\u540e\u5c06\u516c\u94a5\u6dfb\u52a0\u5230\u670d\u52a1\u5668\u4e0a\u7684~\/.ssh\/authorized_keys\u6587\u4ef6\u4e2d\u3002 \u7981\u7528\u4e0d\u5fc5\u8981\u7684\u670d\u52a1 \u7981\u7528\u4e0d\u5fc5\u8981\u7684\u670d\u52a1\u662f\u51cf\u5c11\u653b\u51fb\u9762\u7684\u4e00\u79cd\u6709\u6548\u65b9\u6cd5\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u67e5\u770b\u5f53\u524d\u6b63\u5728\u8fd0\u884c\u7684\u670d\u52a1\uff1a sudo systemctl list-unit-files &#8211;type=service [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-62468","post","type-post","status-publish","format-standard","hentry","category-os"],"_links":{"self":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/62468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/comments?post=62468"}],"version-history":[{"count":0,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/62468\/revisions"}],"wp:attachment":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/media?parent=62468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/categories?post=62468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/tags?post=62468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}