📄 8-2.htm
字号:
</o:shapedefaults></xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
<o:regrouptable v:ext="edit">
<o:entry new="1" old="0"/>
<o:entry new="2" old="0"/>
<o:entry new="3" old="0"/>
<o:entry new="4" old="0"/>
<o:entry new="5" old="0"/>
<o:entry new="6" old="0"/>
<o:entry new="7" old="0"/>
<o:entry new="8" old="0"/>
<o:entry new="9" old="0"/>
<o:entry new="10" old="0"/>
<o:entry new="11" old="10"/>
<o:entry new="12" old="11"/>
<o:entry new="13" old="12"/>
<o:entry new="14" old="12"/>
<o:entry new="15" old="12"/>
<o:entry new="16" old="0"/>
<o:entry new="17" old="0"/>
<o:entry new="18" old="17"/>
<o:entry new="19" old="18"/>
<o:entry new="20" old="19"/>
<o:entry new="21" old="20"/>
<o:entry new="22" old="21"/>
<o:entry new="23" old="22"/>
<o:entry new="24" old="23"/>
<o:entry new="25" old="24"/>
<o:entry new="26" old="0"/>
</o:regrouptable>
</o:shapelayout></xml><![endif]-->
</head>
<body lang=ZH-CN link=blue vlink=purple style='tab-interval:21.0pt;text-justify-trim:
punctuation'>
<div class=Section1 style='layout-grid:15.6pt'>
<p class=MsoNormal align=right style='text-align:right'><a name="_top"></a><b><span
style='font-size:26.0pt;mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman";color:#993366'>实验</span></b><b><i
style='mso-bidi-font-style:normal'><span lang=EN-US style='font-size:55.0pt;
mso-bidi-font-size:12.0pt;color:#993366'>8</span></i><span lang=EN-US
style='color:#993366'><o:p></o:p></span></b></p>
<p class=MsoNormal align=right style='text-align:right;word-break:break-all'><!--[if gte vml 1]><v:shapetype
id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t"
path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter"/>
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0"/>
<v:f eqn="sum @0 1 0"/>
<v:f eqn="sum 0 0 @1"/>
<v:f eqn="prod @2 1 2"/>
<v:f eqn="prod @3 21600 pixelWidth"/>
<v:f eqn="prod @3 21600 pixelHeight"/>
<v:f eqn="sum @0 0 1"/>
<v:f eqn="prod @6 1 2"/>
<v:f eqn="prod @7 21600 pixelWidth"/>
<v:f eqn="sum @8 21600 0"/>
<v:f eqn="prod @7 21600 pixelHeight"/>
<v:f eqn="sum @10 21600 0"/>
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect"/>
<o:lock v:ext="edit" aspectratio="t"/>
</v:shapetype><v:shape id="_x0000_s1609" type="#_x0000_t75" style='position:absolute;
left:0;text-align:left;margin-left:0;margin-top:0;width:546.85pt;height:34.15pt;
z-index:-1;mso-wrap-edited:f;mso-position-horizontal:left;
mso-position-vertical:top;mso-position-vertical-relative:line' wrapcoords="-26 0 -26 21176 21600 21176 21600 0 -26 0"
o:allowoverlap="f">
<v:imagedata src="8-2.files/image001.jpg" o:title="image_bk"/>
<w:wrap type="square" anchorx="page"/>
</v:shape><![endif]--><![if !vml]><img width=729 height=46
src="8-2.files/image002.jpg" align=left hspace=12 v:shapes="_x0000_s1609"><![endif]><b><span
style='font-size:24.0pt;mso-bidi-font-size:12.0pt;font-family:黑体;mso-ascii-font-family:
"Times New Roman";color:navy'>操作系统的安全</span></b><b><span lang=EN-US
style='font-size:16.0pt;mso-bidi-font-size:12.0pt;mso-fareast-font-family:黑体;
color:navy'><span style='mso-spacerun:yes'> </span></span></b></p>
<p class=MsoNormal><span lang=EN-US> </span></p>
<p class=MsoNormal><span lang=EN-US> </span></p>
<p class=MsoNormal><span lang=EN-US> </span></p>
<p class=MsoNormal><span lang=EN-US> </span></p>
<h2><a name="_Toc16587483"></a><a name="_Toc38471885"></a><a name="_Toc45739242"><span
style='mso-bookmark:_Toc38471885'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>8.2<span style='mso-spacerun:yes'> </span>Linux文件权限</span></span></span></a><span
style='mso-bookmark:_Toc16587483'></span></h2>
<p class=MsoNormal align=center style='text-align:center'><span
style='mso-bookmark:_Toc16587483'><span lang=EN-US>(</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>实验估计时间：</span><span
lang=EN-US>120</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>分钟</span><span lang=EN-US>)</span></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'><span lang=EN-US> </span></span></p>
<p class=MsoNormal style='margin-left:21.0pt;text-indent:-21.0pt;mso-list:l0 level1 lfo2;
tab-stops:list 21.0pt'><span style='mso-bookmark:_Toc16587483'><![if !supportLists]><span
lang=EN-US style='font-family:Wingdings;mso-fareast-font-family:Wingdings;
mso-bidi-font-family:Wingdings'><span style='mso-list:Ignore'>Ø<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]></span><a href="#_背景知识"><span style='mso-bookmark:
_Toc16587483'><b style='mso-bidi-font-weight:normal'><span style='font-family:
宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman"'>背景知识</span></b></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'><b
style='mso-bidi-font-weight:normal'><span lang=EN-US><o:p></o:p></span></b></span></p>
<p class=MsoNormal style='margin-left:21.0pt;text-indent:-21.0pt;mso-list:l0 level1 lfo2;
tab-stops:list 21.0pt'><span style='mso-bookmark:_Toc16587483'><![if !supportLists]><span
lang=EN-US style='font-family:Wingdings;mso-fareast-font-family:Wingdings;
mso-bidi-font-family:Wingdings'><span style='mso-list:Ignore'>Ø<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]></span><a href="#_实验目的"><span style='mso-bookmark:
_Toc16587483'><b style='mso-bidi-font-weight:normal'><span style='font-family:
宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman"'>实验目的</span></b></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'><b
style='mso-bidi-font-weight:normal'><span lang=EN-US><o:p></o:p></span></b></span></p>
<p class=MsoNormal style='margin-left:21.0pt;text-indent:-21.0pt;mso-list:l0 level1 lfo2;
tab-stops:list 21.0pt'><span style='mso-bookmark:_Toc16587483'><![if !supportLists]><span
lang=EN-US style='font-family:Wingdings;mso-fareast-font-family:Wingdings;
mso-bidi-font-family:Wingdings'><span style='mso-list:Ignore'>Ø<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]></span><a href="#_工具/准备工作"><span
style='mso-bookmark:_Toc16587483'><b style='mso-bidi-font-weight:normal'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>工具</span><span lang=EN-US>/</span></b></span><span
style='mso-bookmark:_Toc16587483'><b style='mso-bidi-font-weight:normal'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>准备工作</span></b></span><span style='mso-bookmark:_Toc16587483'></span></a><span
style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal style='margin-left:21.0pt;text-indent:-21.0pt;mso-list:l0 level1 lfo2;
tab-stops:list 21.0pt'><span style='mso-bookmark:_Toc16587483'><![if !supportLists]><span
lang=EN-US style='font-family:Wingdings;mso-fareast-font-family:Wingdings;
mso-bidi-font-family:Wingdings'><span style='mso-list:Ignore'>Ø<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]></span><a href="#_实验内容与步骤"><span
style='mso-bookmark:_Toc16587483'><b style='mso-bidi-font-weight:normal'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>实验内容与步骤</span></b></span><span style='mso-bookmark:_Toc16587483'></span></a><span
style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'><span lang=EN-US> </span></span></p>
<h3><span style='mso-bookmark:_Toc16587483'><a name="_Toc45739243"></a><a
name="_Toc38471886"></a><a name="_背景知识"></a><span style='mso-bookmark:_Toc45739243'><span
style='mso-bookmark:_Toc38471886'>背景知识</span></span></span></h3>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><a
name="_Toc38471887"><span style='font-family:宋体;mso-ascii-font-family:"Times New Roman";
mso-hansi-font-family:"Times New Roman"'>作为全面安全策略的一个主要组成部分，文件系统安全决定了谁可以访问什么数据，以及他们可以如何处理数据。系统管理员基于用户、属组和权限建立其文件系统安全。目录和文件权限可以使用带</span><span
lang=EN-US> –l (</span></a></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>长列表</span><span
lang=EN-US>) </span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>选项的</span><span
lang=EN-US>ls (</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>列表</span><span
lang=EN-US>) </span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>命令来确定。可以使用</span><span
lang=EN-US>ls -l</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>命令确定文件类型、权限、所有者和属组。系统将显示文件和目录的权限，解释结果，以评价不同用户类别上权限的作用。</span></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>接着，将使用命令行工具程序分析和修改</span><span
lang=EN-US>Linux</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件系统安全权限。</span></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件和目录权限可以使用</span><span
class=SpellE><span lang=EN-US>chmod</span></span><span lang=EN-US> (</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>修改模式</span><span lang=EN-US>) </span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>命令修改。在正常情况下，文件或目录的默认权限可以满足大多数安全的需要。可能有很多次想要修改文件或目录的权限。在默认情况下，所有创建的文件设定了允许其他类别的用户可以读取这个文件的权限。这意味着所有拥有登录</span><span
lang=EN-US>id</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>的人都可以查看和拷贝文件的内容。对于机密文件和私人信息，可以修改文件的权限，防止其他人访问它。</span></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span lang=EN-US>shell</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>脚本是想要修改其权限的另一个例子。当创建一个</span><span lang=EN-US>shell</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>脚本文件</span><span lang=EN-US> (</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>或任何文件</span><span lang=EN-US>) </span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>的时候，即使是对文件的所有者</span><span lang=EN-US>/</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>创建者，默认的权限不包括执行权限。为了运行</span><span lang=EN-US>shell</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>脚本，必须通过给用户</span><span lang=EN-US> (</span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>所有者</span><span lang=EN-US>) </span></span></span><span
style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:_Toc38471887'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>类别添加执行权限来修改权限。</span></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>最后，使用</span><span
lang=EN-US>GNOME (</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>公共桌面环境</span><span
lang=EN-US>) </span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件管理器来分析和修改文件系统权限。</span><span
lang=EN-US>GNOME</span></span></span><span style='mso-bookmark:_Toc16587483'><span
style='mso-bookmark:_Toc38471887'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件管理器工具程序提供了一个文件系统的图形化界面，可以用来查看和修改文件和文件夹的权限。</span></span></span><a
href="#_top"><span style='mso-bookmark:_Toc16587483'><span style='mso-bookmark:
_Toc38471887'><span lang=EN-US style='text-decoration:none;text-underline:none'><!--[if gte vml 1]><v:shape
id="_x0000_i1025" type="#_x0000_t75" style='width:45pt;height:17.25pt'>
<v:imagedata src="8-2.files/image003.gif" o:title="02"/>
</v:shape><![endif]--><![if !vml]><img border=0 width=60 height=23
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -