Skip to Content
VMWARE錦囊妙計第二版
book

VMWARE錦囊妙計第二版

by Ryan Troy, Matthew Helmke
April 2013
Beginner to intermediate
368 pages
6h 45m
Chinese
GoTop Information, Inc.
Content preview from VMWARE錦囊妙計第二版
一般安全性(General Security
|
237
力去執行
esxcfg
命令,並且能夠重新啟動 VMware 管理伺服器,我們可以替代使用這
一行:
ryan, matthew ALL= /usr/sbin/esxcfg-*, service mgmt-vmware restart
如訣竅 6.15 提到的,您也可以配置
sudo
以允許使用者執行命令而無需輸入他們的密
碼,在此我們給
ryan
matthew
能夠執行所有
esxcfg
命令與重新啟動 VMware 管理伺
服器的能力,而不需要輸入
NOPASSWD
變數使用的密碼:
ryan, matthew ALL= NOPASSWD: /usr/sbin/esxcfg-*, service mgmt-vmware restart
接下來的範例,我們讓
ryan
matthew
還有
bob
ADMINS
群組的成員,並且建立一個
特定的
ESXCMD
群組,指定他們可以執行的命令,不過我們停用使用
su
命令的能力:
Cmnd_Alias ESXCMD = /usr/sbin/esxcfg-firewall, /usr/bin/esxtop, \
/usr/sbin/esxcfginfo, /etc/init.d/mgmt-vmware
User_Alias ADMINS = ryan, matthew, bob
ADMINS ALL = !/usr/bin/su, ESXCMD
這個組態配置合理的嘗試確認使用者無法使用
su
命令永久的成為
root
使用者,不過它
無法避免他們複製檔案到其他地方,我們建立政策的目標是要讓您可以追蹤您的使用者 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

精實企業|高績效組織如何達成創新規模化

精實企業|高績效組織如何達成創新規模化

Jez Humble, Joanne Molesky, Barry O'Reilly
深度學習|內行人的做法

深度學習|內行人的做法

Josh Patterson, Adam Gibson

Publisher Resources

ISBN: 9789862767443