{"id":743,"date":"2019-07-08T11:54:43","date_gmt":"2019-07-08T03:54:43","guid":{"rendered":"https:\/\/bigzhu.cn\/?p=743"},"modified":"2019-07-09T11:15:23","modified_gmt":"2019-07-09T03:15:23","slug":"%e9%98%bf%e9%87%8c%e4%ba%91%e6%a0%87%e5%87%86-centos-linux-7%e5%ae%89%e5%85%a8%e5%9f%ba%e7%ba%bf%e6%a3%80%e6%9f%a5","status":"publish","type":"post","link":"https:\/\/bigzhu.cn\/?p=743","title":{"rendered":"\u963f\u91cc\u4e91\u6807\u51c6-CentOS Linux 7\u5b89\u5168\u57fa\u7ebf\u68c0\u67e5"},"content":{"rendered":"\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u68c0\u67e5\u5bc6\u7801\u91cd\u7528\u662f\u5426\u53d7\u9650\u5236  |  \u8eab\u4efd\u9274\u522b <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f3a\u5236\u7528\u6237\u4e0d\u91cd\u7528\u6700\u8fd1\u4f7f\u7528\u7684\u5bc6\u7801\uff0c\u964d\u4f4e\u5bc6\u7801\u731c\u6d4b\u653b\u51fb\u98ce\u9669<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\/etc\/pam.d\/password-auth\u548c\/etc\/pam.d\/system-auth\u4e2dpassword  sufficient pam_unix.so  \u8fd9\u884c\u7684\u672b\u5c3e\u914d\u7f6eremember\u53c2\u6570\u4e3a5-24\u4e4b\u95f4\uff0c\u539f\u6765\u7684\u5185\u5bb9\u4e0d\u7528\u66f4\u6539\uff0c\u53ea\u5728\u672b\u5c3e\u52a0\u4e86remember=5\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u786e\u4fddSSH LogLevel\u8bbe\u7f6e\u4e3aINFO | \u670d\u52a1\u914d\u7f6e<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u786e\u4fddSSH LogLevel\u8bbe\u7f6e\u4e3aINFO,\u8bb0\u5f55\u767b\u5f55\u548c\u6ce8\u9500\u6d3b\u52a8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7f16\u8f91 \/etc\/ssh\/sshd_config \u6587\u4ef6\u4ee5\u6309\u5982\u4e0b\u65b9\u5f0f\u8bbe\u7f6e\u53c2\u6570(\u53d6\u6d88\u6ce8\u91ca):<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">LogLevel INFO<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li> <strong>\u9ad8<\/strong> \u8bbe\u7f6eSSH\u7a7a\u95f2\u8d85\u65f6\u9000\u51fa\u65f6\u95f4 | \u670d\u52a1\u914d\u7f6e <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbe\u7f6eSSH\u7a7a\u95f2\u8d85\u65f6\u9000\u51fa\u65f6\u95f4,\u53ef\u964d\u4f4e\u672a\u6388\u6743\u7528\u6237\u8bbf\u95ee\u5176\u4ed6\u7528\u6237ssh\u4f1a\u8bdd\u7684\u98ce\u9669<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7f16\u8f91\/etc\/ssh\/sshd_config\uff0c\u5c06ClientAliveInterval \u8bbe\u7f6e\u4e3a300\u5230900\uff0c\u53735-15\u5206\u949f\uff0c\u5c06ClientAliveCountMax\u8bbe\u7f6e\u4e3a0-3\u4e4b\u95f4\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ClientAliveInterval 600\nClientAliveCountMax 2<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> SSHD\u5f3a\u5236\u4f7f\u7528V2\u5b89\u5168\u534f\u8bae |  SSH\u670d\u52a1\u914d\u7f6e                  <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SSHD\u5f3a\u5236\u4f7f\u7528V2\u5b89\u5168\u534f\u8bae<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u52a0\u56fa\u5efa\u8bae<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7f16\u8f91 \/etc\/ssh\/sshd_config \u6587\u4ef6\u4ee5\u6309\u5982\u4e0b\u65b9\u5f0f\u8bbe\u7f6e\u53c2\u6570\uff1a <\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Protocol 2<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u786e\u4fddSSH MaxAuthTries\u8bbe\u7f6e\u4e3a3\u52306\u4e4b\u95f4 |  SSH\u670d\u52a1\u914d\u7f6e                  <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbe\u7f6e\u8f83\u4f4e\u7684Max AuthTrimes\u53c2\u6570\u5c06\u964d\u4f4eSSH\u670d\u52a1\u5668\u88ab\u66b4\u529b\u653b\u51fb\u6210\u529f\u7684\u98ce\u9669\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\/etc\/ssh\/sshd_config\u4e2d\u53d6\u6d88MaxAuthTries\u6ce8\u91ca\u7b26\u53f7#\uff0c\u8bbe\u7f6e\u6700\u5927\u5bc6\u7801\u5c1d\u8bd5\u5931\u8d25\u6b21\u65703-6\uff0c\u5efa\u8bae\u4e3a4\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">MaxAuthTries 4<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li> <strong>\u9ad8<\/strong> \u8bbe\u7f6e\u5bc6\u7801\u4fee\u6539\u6700\u5c0f\u95f4\u9694\u65f6\u95f4 | \u8eab\u4efd\u9274\u522b <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbe\u7f6e\u5bc6\u7801\u4fee\u6539\u6700\u5c0f\u95f4\u9694\u65f6\u95f4\uff0c\u9650\u5236\u5bc6\u7801\u66f4\u6539\u8fc7\u4e8e\u9891\u7e41<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 \/etc\/login.defs \u4e2d\u5c06 PASS_MIN_DAYS \u53c2\u6570\u8bbe\u7f6e\u4e3a7-14\u4e4b\u95f4,\u5efa\u8bae\u4e3a7\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">PASS_MIN_DAYS 7<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"> \u9700\u540c\u65f6\u6267\u884c\u547d\u4ee4\u4e3aroot\u7528\u6237\u8bbe\u7f6e\uff1a <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chage --mindays 7 root<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u8bbe\u7f6e\u5bc6\u7801\u5931\u6548\u65f6\u95f4 | \u8eab\u4efd\u9274\u522b <\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bbe\u7f6e\u5bc6\u7801\u5931\u6548\u65f6\u95f4\uff0c\u5f3a\u5236\u5b9a\u671f\u4fee\u6539\u5bc6\u7801\uff0c\u51cf\u5c11\u5bc6\u7801\u88ab\u6cc4\u6f0f\u548c\u731c\u6d4b\u98ce\u9669\uff0c\u4f7f\u7528\u975e\u5bc6\u7801\u767b\u9646\u65b9\u5f0f(\u5982\u5bc6\u94a5\u5bf9)\u8bf7\u5ffd\u7565\u6b64\u9879\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u52a0\u56fa\u5efa\u8bae<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>\u4f7f\u7528\u975e\u5bc6\u7801\u767b\u9646\u65b9\u5f0f\u5982\u5bc6\u94a5\u5bf9\uff0c\u8bf7\u5ffd\u7565\u6b64\u9879\u3002<\/code>\u5728 \/etc\/login.defs \u4e2d\u5c06 PASS_MAX_DAYS \u53c2\u6570\u8bbe\u7f6e\u4e3a 60-180\u4e4b\u95f4\uff0c\u5982:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">PASS_MAX_DAYS 90<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u9700\u540c\u65f6\u6267\u884c\u547d\u4ee4\u8bbe\u7f6eroot\u5bc6\u7801\u5931\u6548\u65f6\u95f4\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">chage --maxdays 90 root<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u5bc6\u7801\u590d\u6742\u5ea6\u68c0\u67e5 | \u8eab\u4efd\u9274\u522b<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u68c0\u67e5\u5bc6\u7801\u957f\u5ea6\u548c\u5bc6\u7801\u662f\u5426\u4f7f\u7528\u591a\u79cd\u5b57\u7b26\u7c7b\u578b<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7f16\u8f91\/etc\/security\/pwquality.conf\uff0c\u628aminlen\uff08\u5bc6\u7801\u6700\u5c0f\u957f\u5ea6\uff09\u8bbe\u7f6e\u4e3a9-32\u4f4d\uff0c\u628aminclass\uff08\u81f3\u5c11\u5305\u542b\u5c0f\u5199\u5b57\u6bcd\u3001\u5927\u5199\u5b57\u6bcd\u3001\u6570\u5b57\u3001\u7279\u6b8a\u5b57\u7b26\u7b494\u7c7b\u5b57\u7b26\u4e2d\u7b493\u7c7b\u62164\u7c7b\uff09\u8bbe\u7f6e\u4e3a3\u62164\u3002\u5982\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">minlen=10\nminclass=3<\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u786e\u4fddroot\u662f\u552f\u4e00\u7684UID\u4e3a0\u7684\u5e10\u6237 | \u8eab\u4efd\u9274\u522b<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9664root\u4ee5\u5916\u5176\u4ed6UID\u4e3a0\u7684\u7528\u6237\u90fd\u5e94\u8be5\u5220\u9664\uff0c\u6216\u8005\u4e3a\u5176\u5206\u914d\u65b0\u7684UID<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9664root\u4ee5\u5916\u5176\u4ed6UID\u4e3a0\u7684\u7528\u6237(\u67e5\u770b\u547d\u4ee4<code>cat \/etc\/passwd | awk -F: '($3 == 0) { print $1 }'|grep -v '^root$'<\/code>)\u90fd\u5e94\u8be5\u5220\u9664\uff0c\u6216\u8005\u4e3a\u5176\u5206\u914d\u65b0\u7684UID<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>\u9ad8<\/strong> \u5f00\u542f\u5730\u5740\u7a7a\u95f4\u5e03\u5c40\u968f\u673a\u5316 | \u5165\u4fb5\u9632\u8303<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u63cf\u8ff0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u5c06\u8fdb\u7a0b\u7684\u5185\u5b58\u7a7a\u95f4\u5730\u5740\u968f\u673a\u5316\u6765\u589e\u5927\u5165\u4fb5\u8005\u9884\u6d4b\u76ee\u7684\u5730\u5740\u96be\u5ea6\uff0c\u4ece\u800c\u964d\u4f4e\u8fdb\u7a0b\u88ab\u6210\u529f\u5165\u4fb5\u7684\u98ce\u9669<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u52a0\u56fa\u5efa\u8bae<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\/etc\/sysctl.conf\u6216\/etc\/sysctl.d\/*\u6587\u4ef6\u4e2d\u8bbe\u7f6e\u4ee5\u4e0b\u53c2\u6570\uff1a\n<code>kernel.randomize_va_space = 2<\/code>\n\u6267\u884c\u547d\u4ee4\uff1a\n<code>sysctl -w kernel.randomize_va_space=2<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u9ad8 \u68c0\u67e5\u5bc6\u7801\u91cd\u7528\u662f\u5426\u53d7\u9650\u5236 | \u8eab\u4efd\u9274\u522b \u63cf\u8ff0 \u5f3a\u5236\u7528\u6237\u4e0d\u91cd\u7528\u6700\u8fd1\u4f7f\u7528\u7684\u5bc6\u7801\uff0c\u964d\u4f4e\u5bc6\u7801\u731c\u6d4b\u653b\u51fb\u98ce\u9669  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[41,40,39],"class_list":["post-743","post","type-post","status-publish","format-standard","hentry","category-2","tag-centos","tag-linux","tag-39"],"_links":{"self":[{"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/posts\/743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=743"}],"version-history":[{"count":4,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/posts\/743\/revisions"}],"predecessor-version":[{"id":748,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=\/wp\/v2\/posts\/743\/revisions\/748"}],"wp:attachment":[{"href":"https:\/\/bigzhu.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bigzhu.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}