Linux云计算学习笔记day20 Linux云计算学习笔记day20

自己搭建网站流程：
1.购买云服务器
2.在服务器上面搭建网站环境 lnmp
3.购买域名
https://wanwang.aliyun.com/
修改权限

通过数字 chmod755/oldboy/oldboy.txt 通过字母 -rw-r--r--1 root root321 Apr 16 12:19 oldboy.txt.bak ugo

user group other
所有者所属用户组其他人
chmod u/g/o +|-|= 权限 oldboy.txt
给文件加上执行权限(/etc/rc.d/rc.local )
[root@oldboyedu59 ~]# chmod +x /etc/rc.d/rc.local
[root@oldboyedu59 ~]# ll /etc/rc.d/rc.local
-rwxr-xr-x. 1 root root 473 Oct 31 07:31 /etc/rc.d/rc.local
搭建测试权限环境
mkdir -p /oldboy/
echo pwd >/oldboy/lidao.sh
chown oldboy.oldboy /oldboy/lidao.sh
useradd oldboy 如果oldboy有问题则删除再添加需要2个窗口
root oldboy
root 下面测试 rwx

[root@oldboyedu59 ~]# ll /oldboy/lidao.sh -rw-r--r-- 1 root root 4 Apr 23 09:58 /oldboy/lidao.sh [root@oldboyedu59 ~]# chmod +x /oldboy/lidao.sh [root@oldboyedu59 ~]# ll /oldboy/lidao.sh -rwxr-xr-x 1 root root 4 Apr 23 09:58 /oldboy/lidao.sh [root@oldboyedu59 ~]# cat /oldboy/lidao.sh pwd [root@oldboyedu59 ~]# echo 'hostname' >>/oldboy/lidao.sh [root@oldboyedu59 ~]# /oldboy/lidao.sh /root oldboyedu59

测试文件的rwx权限开始###
root修改权限 oldboy下测试 root 修改权限

[root@oldboyedu59 ~]# chmod u=r /oldboy/lidao.sh [root@oldboyedu59 ~]# ll /oldboy/lidao.sh -r--r-xr-x 1 root root 13 Apr 23 10:00 /oldboy/lidao.sh [root@oldboyedu59 ~]# ll /oldboy/lidao.sh -r--r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh

oldboy下测试文件的r权限

[oldboy@oldboyedu59 ~]$ ll /oldboy/lidao.sh -r--r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh pwd hostname [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh -bash: /oldboy/lidao.sh: Permission denied [oldboy@oldboyedu59 ~]$ /oldboy/lidao.sh -bash: /oldboy/lidao.sh: Permission denied

文件的r小结：
是否能查看文件的内容

[root@oldboyedu59 ~]# #root 修改权限 w [root@oldboyedu59 ~]# [root@oldboyedu59 ~]# [root@oldboyedu59 ~]# chmod u=w /oldboy/lidao.sh [root@oldboyedu59 ~]# ll /oldboy/lidao.sh --w-r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh

W10: Warning: Changing a readonly file
oldboy进行测试

ldboy@oldboyedu59 ~]$ ll /oldboy/lidao.sh ▽-w-r-xr-x 1 oldboy oldboy 13 Apr 23 10:00 /oldboy/lidao.sh [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh cat: /oldboy/lidao.sh: Permission denied [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh [oldboy@oldboyedu59 ~]$ echo pwd >>/oldboy/lidao.sh [oldboy@oldboyedu59 ~]$ cat /oldboy/lidao.sh cat: /oldboy/lidao.sh: Permission denied [oldboy@oldboyedu59 ~]$ /oldboy/lidao.sh -bash: /oldboy/lidao.sh: Permission denied

文件的rw小结：
1.r 是否能查看文件的内容
2.w 是否能修改文件内容需要r配合
3.只有w的时候vim强制修改文件会导致源文件内容被覆盖

[root@oldboyedu59 ~]# #root 修改权限 x [root@oldboyedu59 ~]# chmod u=x /oldboy/lidao.sh [root@oldboyedu59 ~]# ll /oldboy/lidao.sh ---xr-xr-x 1 oldboy oldboy 19 Apr 23 10:14 /oldboy/lidao.sh

文件的rwx小结：
1.r 是否能查看文件的内容
2.w 是否能修改文件内容需要r配合
3.只有w的时候vim强制修改文件会导致源文件内容被覆盖
4.x 是否能执行（命令或脚本）需要r配合
root 环境准备 mkdir -p /oldboy/lidao
chown oldboy.oldboy /oldboy/lidao
touch /oldboy/lidao{01..5}.txt
[root@oldboyedu59 ~]# ll -d /oldboy/lidao
drwxr-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao
root 测试目录r权限 [root@oldboyedu59 ~]# chmod u=r /oldboy/lidao
[root@oldboyedu59 ~]# ll -d /oldboy/lidao
dr--r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao
oldboy 测试目录r权限

[oldboy@oldboyedu59 /oldboy]$ ll -dlidao dr--r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 lidao [oldboy@oldboyedu59 /oldboy]$ ls -llidao ls: cannot access lidao/oldboy01.txt: Permission denied ls: cannot access lidao/oldboy02.txt: Permission denied ls: cannot access lidao/oldboy03.txt: Permission denied ls: cannot access lidao/oldboy04.txt: Permission denied ls: cannot access lidao/oldboy05.txt: Permission denied ls: cannot access lidao/alex01.txt: Permission denied ls: cannot access lidao/alex02.txt: Permission denied ls: cannot access lidao/alex03.txt: Permission denied ls: cannot access lidao/alex04.txt: Permission denied ls: cannot access lidao/alex05.txt: Permission denied ls: cannot access lidao/oldboy.txt: Permission denied total 0 -????????? ? ? ? ?? alex01.txt -????????? ? ? ? ?? alex02.txt -????????? ? ? ? ?? alex03.txt -????????? ? ? ? ?? alex04.txt -????????? ? ? ? ?? alex05.txt -????????? ? ? ? ?? oldboy01.txt -????????? ? ? ? ?? oldboy02.txt -????????? ? ? ? ?? oldboy03.txt -????????? ? ? ? ?? oldboy04.txt -????????? ? ? ? ?? oldboy05.txt -????????? ? ? ? ?? oldboy.txt

[root@oldboyedu59 ~]# #测试目录的w [root@oldboyedu59 ~]# chmod u=w /oldboy/lidao [root@oldboyedu59 ~]# ll -d /oldboy/lidao d-w-r-xr-x 2 oldboy oldboy 214 Apr 19 09:25 /oldboy/lidao

[oldboy@oldboyedu59 /oldboy]$ ls -l /root/ ls: cannot open directory /root/: Permission denied[oldboy@oldboyedu59 /oldboy]$ touch/etc/passwd.txt touch: cannot touch ‘/etc/passwd.txt’: Permission denied[oldboy@oldboyedu59 /oldboy]$ rm -f /etc/hosts rm: cannot remove ‘/etc/hosts’: Permission denied[oldboy@oldboyedu59 /oldboy]$ cat /etc/shadow cat: /etc/shadow: Permission denied [oldboy@oldboyedu59 /oldboy]$ echo '#' >>/etc/passwd -bash: /etc/passwd: Permission denied

Permission denied
查看umask [root@oldboyedu59 ~]# umask
0022
文件默认权限的由来 666
-022
=644
目录默认的权限由来 777
-022
=755
umask 032
文件默认权限的由来 666
-032
=634
+010
644
目录默认的权限由来 777
-032
=745
1.umask 035 file dir默认的权限
file 666
-035
631

642

dir 777
035
742
2.创建文件的时候权限是000，创建目录的时候权限是111 umask?
模拟环境：
useradd www
mkdir -p /app/blog/uploads
touch /app/blog/guoav{01..5}-blue-ray-4k.mkv.torrent
root 窗口 www窗口

[oldboy@oldboyedu59 /app/blog]$ touch /app/blog/uploads/ycw-5k-100tb.torrent touch: cannot touch ‘/app/blog/uploads/ycw-5k-100tb.torrent’: Permission denied [oldboy@oldboyedu59 /app/blog]$ ll -d /app/blog/uploads/ycw-5k-100tb.torrent ls: cannot access /app/blog/uploads/ycw-5k-100tb.torrent: No such file or directory [oldboy@oldboyedu59 /app/blog]$ ll -d /app/blog/uploads/ drwxr-xr-x 2 root root 6 Apr 23 11:55 /app/blog/uploads/

方法1 给uploads 目录o+w 方法2 把uploads 修改为www.www 网站程序代码 /app/blog 目录站点目录（单机权限控制）
1.谁运行网站程序
虚拟用户 www
2.控制权限
站点目录下文件 644 root root
站点目录下目录 755 root root
3.对于上传目录uploads
站点目录下文件 644 www www
站点目录下目录 755 www www
4.通过程序控制只能上传图片或压缩包
【Linux云计算学习笔记day20】5.取消上传上来的文件的执行权限（讲解到nfs的时候）