April 2013
Beginner to intermediate
368 pages
6h 45m
Chinese
Content preview from VMWARE錦囊妙計第二版
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
一般安全性（General Security）
|
227
現在使用您習慣的編輯器編輯這個檔案：
/etc/grub.conf
為了在您的 GRUB 選單上設定密碼，您需要增加一個新的變數到這個檔案，類似這樣：
...
default=1
timeout=10
在
timeout
變數列出後，加入以下的行列（請記住，根據您的組態配置，您的
timeout
數值可能會稍微不同），並為您的
hash_string
變數替代為稍早複製的雜湊字串：
password –-md5
hash_string
儲存文件並離開，當您重新啟動您的 ESX 伺服器，您將不能在沒有先輸入一個密碼而
編輯任何 GRUB 選單內的啟動選項。藉由加入一個 GRUB 密碼，您排除最後的招數，
實務上而言，實機存取系統的人還是可以未經授權的存取到您的伺服器，大部分攻擊者
能做的就是從 CD 啟動或是損壞實體系統。
6.10 停用 USB 裝置掛載
問題
僅適用於 ESXi 3.5/4.x — 允許 USB 裝置直接連結和掛載到您的 ESX 伺服器，可能會導
致安全性的風險。
解決方案
在您的 ESX 伺服器上藉由編輯
/etc/modules.conf
文件來停用自動掛載 USB 裝置。
討論
開始請先以
root
登入到 ESX 伺服器，然後編輯下列文件：
/etc/modules.conf
找尋以下項目，並且加入 # 號到列首：
alias usb-controller
更動之後請儲存組態配置文件，為了將新的設置生效，您將需要重新啟動您的伺服器。
217
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.