Linux運(yùn)維常用腳本
一、根據(jù)PID過濾進(jìn)程所有信息
! /bin/bash
read -p "請輸入要查詢的PID: " P
n=ps -aux| awk '$2~/^'$P'$/{print $11}'|wc -l
if [ P"
echo "進(jìn)程命令：ps -aux| awk '$2~/^'$P'$/{print $11}'"
echo "進(jìn)程所屬用戶: ps -aux| awk '$2~/^'$P'$/{print $1}'"
echo "CPU占用率：ps -aux| awk '$2~/^'$P'$/{print $3}'%"
echo "內(nèi)存占用率：ps -aux| awk '$2~/^'$P'$/{print $4}'%"
echo "進(jìn)程開始運(yùn)行的時刻：ps -aux| awk '$2~/^'$P'$/{print $9}'"
echo "進(jìn)程運(yùn)行的時間：ps -aux| awk '$2~/^'$P'$/{print $10}'"
echo "進(jìn)程狀態(tài)：ps -aux| awk '$2~/^'$P'$/{print $8}'"
echo "進(jìn)程虛擬內(nèi)存：ps -aux| awk '$2~/^'$P'$/{print $5}'"
echo "進(jìn)程共享內(nèi)存：ps -aux| awk '$2~/^'$P'$/{print $6}'"
echo "--------------------------------"
二浴鸿、根據(jù)進(jìn)程名過濾進(jìn)程信息
! /bin/bash
read -p "請輸入要查詢的進(jìn)程名：" NAME
N=ps -aux | grep $NAME | grep -v grep | wc -l ##統(tǒng)計(jì)進(jìn)程總數(shù)
if [ N -gt 0 ]
do
echo "進(jìn)程PID: ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $2}'"
echo "進(jìn)程命令：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $11}'"
echo "進(jìn)程所屬用戶: ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $1}'"
echo "CPU占用率：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $3}'%"
echo "內(nèi)存占用率：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $4}'%"
echo "進(jìn)程開始運(yùn)行的時刻：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $9}'"
echo "進(jìn)程運(yùn)行的時間：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $11}'"
echo "進(jìn)程狀態(tài)：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $8}'"
echo "進(jìn)程虛擬內(nèi)存：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $5}'"
echo "進(jìn)程共享內(nèi)存：ps -aux | grep $NAME | grep -v grep | awk 'NR=='$i'{print $0}'| awk '{print $6}'"
echo "***************************************************************"
let N-- i++
done
三、根據(jù)用戶名查詢該用戶的相關(guān)信息
! /bin/bash
read -p "請輸入要查詢的用戶名：" A
echo "------------------------------"
n=cat /etc/passwd | awk -F: '$1~/^'$A'$/{print}' | wc -l
if [ A"
echo "該用戶的UID：cat /etc/passwd | awk -F: '$1~/^'$A'$/{print}'|awk -F: '{print $3}'"
echo "該用戶的組為：id $A | awk {'print $3'}"
echo "該用戶的GID為：cat /etc/passwd | awk -F: '$1~/^'$A'$/{print}'|awk -F: '{print $4}'"
echo "該用戶的家目錄為：cat /etc/passwd | awk -F: '$1~/^'$A'$/{print}'|awk -F: '{print $6}'"
Login=cat /etc/passwd | awk -F: '$1~/^'$A'$/{print}'|awk -F: '{print $7}'
if [ Login == "/sbin/nologin" ];then
echo "該用戶沒有登錄系統(tǒng)的權(quán)限６诠佟！"
echo "------------------------------"
fi
fi
四蛤虐、加固系統(tǒng)的一些配置
! /bin/bash
read -p "設(shè)置密碼最多可多少天不修改：" A
read -p "設(shè)置密碼修改之間最小的天數(shù)：" B
read -p "設(shè)置密碼最短的長度：" C
read -p "設(shè)置密碼失效前多少天通知用戶：" D
sed -i '/^PASS_MAX_DAYS/c\PASS_MAX_DAYS 'B'' /etc/login.defs
sed -i '/^PASS_MIN_LEN/c\PASS_MIN_LEN 'D'' /etc/login.defs
echo "已對密碼進(jìn)行加固治拿，新用戶不得和舊密碼相同，且新密碼必須同時包含數(shù)字笆焰、小寫字母劫谅，大寫字母！嚷掠！"
sed -i '/pam_pwquality.so/c\password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type= difok=1 minlen=8 ucredit=-1 lcredit=-1 dcredit=-1' /etc/pam.d/system-auth
echo "已對密碼進(jìn)行加固捏检，如果輸入錯誤密碼超過3次，則鎖定賬戶２唤浴贯城！"
n=cat /etc/pam.d/sshd | grep "auth required pam_tally2.so "|wc -l
if [ $n -eq 0 ];then
sed -i '/%PAM-1.0/a\auth required pam_tally2.so deny=3 unlock_time=150 even_deny_root root_unlock_time300' /etc/pam.d/sshd
fi
echo "已設(shè)置禁止root用戶遠(yuǎn)程登錄！霹娄！"
sed -i '/PermitRootLogin/c\PermitRootLogin no' /etc/ssh/sshd_config
read -p "設(shè)置歷史命令保存條數(shù)：" E
read -p "設(shè)置賬戶自動注銷時間：" F
sed -i '/^HISTSIZE/c\HISTSIZE='F'' /etc/profile
echo "已設(shè)置只允許wheel組的用戶可以使用su命令切換到root用戶能犯！"
sed -i '/pam_wheel.so use_uid/c\auth required pam_wheel.so use_uid ' /etc/pam.d/su
n=cat /etc/login.defs | grep SU_WHEEL_ONLY | wc -l
if [ $n -eq 0 ];then
echo SU_WHEEL_ONLY yes >> /etc/login.defs
fi
echo "即將對系統(tǒng)中的賬戶進(jìn)行檢查...."
echo "系統(tǒng)中有登錄權(quán)限的用戶有："
awk -F: '(1}' /etc/passwd
echo "********************************************"
echo "系統(tǒng)中UID=0的用戶有："
awk -F: '(1}' /etc/passwd
echo "********************************************"
N=awk -F: '($2==""){print $1}' /etc/shadow|wc -l
echo "系統(tǒng)中空密碼用戶有：N -eq 0 ];then
echo "恭喜你，系統(tǒng)中無空密碼用戶Ｈ堋踩晶！"
echo "********************************************"
else
i=1
while [ 2==""){print
i'{print}'
echo "------------------------" echo $None echo "必須為空用戶設(shè)置密碼！枕磁！" passwd $None let N-- done M=awk -F: '(1}' /etc/shadow|wc -l`
if [ M"
fi
fi
echo "即將對系統(tǒng)中重要文件進(jìn)行鎖定，鎖定后將無法添加刪除用戶和組"
read -p "警告：此腳本運(yùn)行后將無法添加刪除用戶和組Ｈ孜排苍！確定輸入Y，取消輸入N学密；Y/N：" i
case $i in
[Y,y])
chattr +i /etc/passwd
chattr +i /etc/shadow
chattr +i /etc/group
chattr +i /etc/gshadow
echo "鎖定成功淘衙！"
;;
[N,n])
chattr -i /etc/passwd
chattr -i /etc/shadow
chattr -i /etc/group
chattr -i /etc/gshadow
echo "取消鎖定成功！腻暮！"
;;
*)
echo "請輸入Y/y or N/n"
esac
