Masu amfani da Linux: Gudanarwa da Izini

A cikin wannan labarin, za mu bincika mahimmancin masu amfani da Linux da aka tsara yadda ya kamata. Za mu bayyana haƙƙin samun dama, farawa da yadda ake ƙirƙira da daidaita masu amfani da ƙare tare da yadda ake ba da dama ga takamaiman fayiloli da manyan fayiloli. Za mu kuma tattauna wasu mahimman kayan aikin tsaro, irin su sudo da SELinux, waɗanda ke taimakawa kare tsarin daga ayyukan da ba a so.

Muhimmancin Gudanar da Mai amfani da Haƙƙin Samun dama a cikin Linux

A duniyar Linux, kula da masu amfani da haƙƙin shiga suna taka muhimmiyar rawa. Ka yi tunanin Linux a matsayin babban gida inda kowane mai amfani haya ne kuma kowane fayil ɗaki ne. Kula da masu amfani kamar sanya wa kowane mai haya makullinsa na musamman, yayin da haƙƙin shiga shine abin da za su iya yi a ɗakinsu.

Idan aka ƙirƙiri mai amfani, ana ba shi suna da kuma lambar sirri ta musamman ( UID ), kamar makullin sirri na gidan. Mai amfani kuma yana da rukuni , wanda ke haɗa su da sauran masu haya. Ƙungiyar tana kama da kulob inda membobi ke raba gata iri ɗaya.

An raba haƙƙin samun damar fayiloli zuwa rukuni uku: mai shi ( mai amfani ), rukuni , da sauransu . Kowane maɓalli (mai amfani) zai iya samun haƙƙinsa na musamman na karatu, rubutu, da aiwatarwa ga kowane rukuni. Misali, mai shi fayil ɗin yana iya samun haƙƙin karantawa da rubutu, ƙungiyar - karantawa kawai, da sauransu - babu komai.

Kulawa ta musamman ta cancanci manufofin tsaro kamar sudo da SELinux , waɗanda ake amfani da su a tsarin Linux. Sudo umarni ne na musamman wanda ke ba masu amfani na yau da kullun damar amfani da haƙƙin superuser (root) na ɗan lokaci don yin takamaiman ayyuka waɗanda yawanci ke samuwa ga masu gudanarwa kawai. Wannan yana taimakawa hana kurakurai na bazata ko rashin amfani da haƙƙin superuser. Lokacin amfani da sudo , yawanci ana buƙatar mai amfani ya shigar da kalmar sirrinsa don tabbatar da asalinsa. Bayan haka, za su iya aiwatar da umarni tare da haƙƙin superuser (root) bisa ga ƙa'idodin da aka saita a cikin fayil ɗin sudoers.

SELinux wani ƙarin tsari ne na tsaro ga tsarin aiki na Linux. Yana sa ido kan waɗanne shirye-shirye da fayiloli za a iya amfani da su a cikin tsarin kuma yana iyakance damar shiga su don hana kutse da hare-hare. Wannan yana sa sabar ta fi tsaro ta hanyar hana yunƙurin kutse ko ayyukan mugunta.

Ƙirƙirar da Gudanar da Masu amfani

Yadda ake ƙirƙirar mai amfani a cikin Linux

Ana ƙirƙirar masu amfani da Linux da umarnin useradd . Misali, don ƙirƙirar mai amfani mai suna "sunan mai amfani", za ku shigar da:

useradd username

Yadda ake saita kalmar wucewa ta Linux

Bayan ƙirƙirar mai amfani, asusunsu ba shi da kariya ta kalmar sirri. Don saita kalmar sirri ga sabon mai amfani, yi amfani da umarnin passwd :

passwd username

Inda sunan mai amfani shine sunan mai amfani wanda ake saita kalmar wucewa don shi.

Yadda ake Duba Jerin Masu Amfani a Linux

Don duba jerin masu amfani a cikin Linux tare da umarni ɗaya a cikin tashar, zaku iya amfani da umarnin yanke :

cut -d: -f1 /etc/passwd

Wannan umarni yana karanta abubuwan da ke cikin fayil ɗin /etc/passwd , wanda ke ɗauke da bayanai game da duk masu amfani.

Don samun bayani game da takamaiman mai amfani, zaku iya amfani da umarnin:

id username

Wannan zai nuna UID , GID , da Ƙungiyoyin mai amfani.

Share Mai Amfani da Linux

Don share mai amfani, yi amfani da umarnin userdel :

userdel username

Duk da haka, wannan umarni ba ya goge fayilolin da ke cikin babban fayil ɗin gidan mai amfani. Don cire su, zaku iya amfani da zaɓin -r :

userdel -r username

Wannan zai share sunan mai amfani tare da kundin adireshin gidansu da duk fayilolin da ke cikinsa.

Gyara Mai Amfani da Linux

Don gyara bayanai game da mai amfani, yi amfani da umarnin usermod . Kayan aikin yana amfani da tsarin rubutu:

usermod argument user

Ana nuna cikakken jeri na yuwuwar gardama a cikin taimakon mai amfani:

Misali, don canza kundin adireshin gida na mai amfani, zaku yi amfani da umarnin:

usermod -d /new/path/to/directory username

Ƙirƙirar da Gudanar da Ƙungiyoyin Masu amfani a cikin Linux

Ƙungiyoyin masu amfani a cikin Linux suna ƙyale masu gudanarwa su haɗa masu amfani da haƙƙin samun dama iri ɗaya. Wannan yana sauƙaƙe gudanar da haƙƙin samun dama kuma yana haɓaka tsaro na tsarin ta hanyar ba da damar saita haƙƙoƙin a matakin rukuni, maimakon yin haka ga kowane mai amfani daban-daban. A matsayin misali, za mu yi la'akari da rukunin masu haɓakawa tare da mai sarrafa mai amfani.

Yadda ake Ƙirƙirar Ƙungiya mai amfani a cikin Linux

Don ƙirƙirar sabuwar ƙungiya, yi amfani da umarnin groupadd tare da sunan sabuwar ƙungiyar:

sudo groupadd group_name

A cikin misalinmu, umarnin zai yi kama da haka:

sudo groupadd developers

Yadda ake Share Rukunin Masu Amfani a Linux

Don share rukuni, yi amfani da umarnin groupdel :

sudo groupdel group_name

Don haka, umarnin:

sudo groupdel developers

Zai share ƙungiyar da aka sanya wa suna masu haɓaka.

Ƙara Masu amfani zuwa Ƙungiya

Don ƙara mai amfani zuwa wani rukuni na musamman, yi amfani da umarnin usermod :

sudo usermod -aG group_name user_name

Misali:

sudo usermod -aG developers admin

Wannan umarni zai ƙara mai amfani mai suna admin zuwa ƙungiyar masu haɓakawa.

Cire Masu Amfani daga Rukuni

Don cire mai amfani daga rukuni, yi amfani da umarnin deluser :

sudo deluser user_name group_name

Umarnin cire mai amfani admin daga rukunin masu haɓakawa :

sudo deluser admin developers

Duba Jerin Rukuni a cikin Linux

Don duba jerin dukkan ƙungiyoyi a cikin tsarin, yi amfani da umarnin cat tare da fayil ɗin /etc/group :

cat /etc/group

Wannan umarnin zai nuna jerin duk ƙungiyoyin da ke cikin tsarin.

Duba Membobin Rukunin Mai Amfani

Bayan aiwatar da ayyuka, zaku iya bincika ƙungiyoyin masu amfani da su ta amfani da umarnin ƙungiyoyi:

groups user_name

Don haka, mun bincika tushen tushen sarrafa ƙungiyoyi masu amfani a cikin Linux. Yanzu, bari mu matsa zuwa mataki na gaba - nazarin aikin haƙƙin samun dama ga fayiloli da kundayen adireshi. Wannan tsari yana ba da damar ƙayyade abubuwan da masu amfani ko ƙungiyoyi za su iya yi game da takamaiman fayiloli da kundayen adireshi, tabbatar da ingantaccen sarrafa tsaro da samun dama ga albarkatun tsarin.

Bayar da Haƙƙin Samun dama ga Fayiloli da kundayen adireshi

Alamar wakilcin Haƙƙin Samun Dama

Kamar yadda muka riga muka gano, akwai nau'ikan masu amfani guda uku a cikin Linux: mai shi ( mai amfani ), rukuni , da sauransu . Kowannensu yana iya mallakar wasu rukunin damar shiga fayiloli ko kundin adireshi:

1. Karanta (Karanta - r): Yana ba da damar duba abubuwan da ke cikin fayil ko kundin adireshi.
2. Rubuta (Rubuta - w): Yana ba da ikon gyara fayil ko ƙirƙirar sabon fayil a cikin kundin adireshi. Don kundin adireshi, wannan kuma yana ba da damar share fayiloli daga gare ta.
3. Execute (Execute - x): Yana ba da izinin aiwatar da fayil ɗin (idan fayil ne mai aiwatarwa) ko shigar da directory (idan directory ne).

A cikin tsarin iyali na Linux, haƙƙoƙin samun dama ana wakilta ta hanyar jeri na haruffa 10. Halin farko yana nuna nau'in fayil ɗin (fayil na yau da kullun, directory, da sauransu), sauran tara kuma rukuni uku ne na haruffa uku ga kowane rukunin masu amfani. Don fahimta, bari mu ɗauki misali.

Haƙƙoƙin shiga -rwxr-xr-- yana nufin:

1. Halin farko (-) yana nuna nau'in fayil ɗin (a cikin wannan yanayin, fayil na yau da kullun).
2. Haruffa uku na mai shi (rwx) suna nuna cewa mai shi ya karanta, ya rubuta, da aiwatar da haƙƙoƙin.
3. Haruffa uku na ƙungiyar (rx) suna nuna cewa membobin ƙungiyar sun karanta kuma sun aiwatar da haƙƙoƙi kawai.
4. Haruffa uku don wasu (r--) suna nufin cewa sauran masu amfani za su iya karanta fayil ɗin kawai.

Ana saita haƙƙin shiga ta amfani da umarnin chmod , kuma tsarin rubutun yana kama da haka:

chmod [options] mode file(s)

inda:

1. [zaɓuɓɓuka] - ƙarin sigogi, kamar -R don sake maimaita haƙƙoƙin samun dama a cikin kundin adireshi da ƙananan bayanan sa.
2. yanayin - kirtani na musamman wanda ke ƙayyadad da waɗanne haƙƙoƙin samun dama aka canza kuma ga wane. Ana iya ƙayyade yanayin ta alamomi (r, w, x) da rago (0 ko 1). Hakanan za'a iya amfani da ƙididdiga masu ƙima (zamu yi magana game da su daga baya)
3. fayil (s) - fayiloli ko kundayen adireshi waɗanda ake amfani da canje-canje.

Wannan mai amfani kayan aiki ne mai ƙarfi sosai, don haka za mu kalli ƴan ainihin umarni ne kawai a matsayin misali.

Canja haƙƙin samun dama ga fayil domin mai shi ya karanta da rubuta haƙƙoƙin, ƙungiyar ta karanta haƙƙoƙin kawai, kuma sauran masu amfani ba su da haƙƙi:

chmod u=rw,g=r,o= filename

Saita haƙƙin samun dama ga duk masu amfani don karantawa da rubutawa zuwa fayil:

chmod a+rw filename

Canza haƙƙin samun dama akai-akai ga duk fayiloli da kundin adireshi a cikin kundin adireshi:

chmod -R u+rwx directory

Wakilin Lambobi na Haƙƙin Samun Dama

A cikin wakilcin lambobi, kowane nau'in mai amfani (mai shi, rukuni, wasu) yana da lambar sa, kuma haɗin waɗannan lambobi yana saita haƙƙoƙin samun damar ƙarshe. Kama da alama, kowane ɗayan haƙƙoƙin uku yana da ƙimarsa, amma a lamba:

1. Karanta (karanta) - darajar 4
2. Rubuta (rubuta) - darajar 2
3. Kisa (aiki) - darajar 1

Hakanan ana amfani da ƙididdiga masu yawa don tantance nau'in mai amfani:

1. Mai fayil (mai amfani) - lambar farko
2. Ƙungiyar mai (ƙungiyar) - lambobi na biyu
3. Sauran masu amfani (wasu) - lamba ta uku

Don haka, cikakken wakilcin lambobi na haƙƙin samun damar fayil ya ƙunshi lambobi uku, kowanne yana wakiltar jimlar ƙimar haƙƙoƙin ga wani nau'in mai amfani. Wannan ya ɗan fi dacewa fiye da amfani da haruffa 10 a cikin alamar alama. Gudanarwa a cikin wannan yanayin zai yi kama da haka:

chmod XYZ file

inda X , Y , da Z lambobi ne da ke wakiltar haƙƙin shiga ga mai shi, rukuni, da sauran masu amfani bi da bi.

Misali, don baiwa mai shi cikakken damar shiga (karanta, rubuta, da aiwatarwa), kuma ƙungiyar da sauran masu amfani kawai karantawa da aiwatarwa, kuna iya amfani da umarnin:

chmod 755 file

Bari mu yi la’akari da wasu misalan:

chmod 700 file

Mai shi kaɗai ke da haƙƙin karantawa, rubuta, da aiwatarwa, yayin da ƙungiyar da sauran masu amfani ba su da haƙƙin shiga.

chmod 644 file

Mai shi yana da haƙƙin karantawa da rubutu, yayin da ƙungiyar da sauran masu amfani ke da haƙƙin karantawa kawai.

chmod 751 file

Mai shi yana da cikakkun haƙƙoƙi, ƙungiyar ta karanta da aiwatar da haƙƙoƙin, kuma sauran masu amfani suna aiwatar da haƙƙoƙin kawai.

Kamar yadda muka ambata a baya, kayan aiki yana da ayyuka masu yawa. A wasu lokuta, zaɓuɓɓukan da ke cikin sashin "taimako" ba su wadatar ba:

Kula da layi na ƙarshe. Amfani da wannan umarni yana buɗe ƙarin takaddun bayanai akan kayan aikin. Hakanan zaka iya ziyartar shafin Wikipedia na hukuma na mai amfani , inda zaka iya samun cikakkun bayanai game da Chmod.

Kammalawa

Masu amfani da Linux da sarrafa su suna da mahimmanci ga tsaro da kwanciyar hankali na OS. A cikin wannan labarin, mun bayyana mahimmancin ingantaccen mai amfani da gudanar da haƙƙin haƙƙin mallaka a cikin Linux, yana rufe ƙirƙira da sarrafa masu amfani, aiki tare da ƙungiyoyin masu amfani, da sanya haƙƙin samun dama ga fayiloli da kundayen adireshi.