Izini na Linux don Masu Gudanar da Tsarin Tsarin Tsarin Tsarin Tsarin Tsarin Tsarin Tsarin Tsarin Tsarin Mulki da Gudanarwa

Batun yin izini a cikin Linux da yadda ake amfani dashi ta hanyar umarnin "chmod" wani abu ne wanda aka fallasa shi sosai kuma aka tattauna shi a cikin SLungiyoyin SL. ta Uswararrun Masu Amfani, Masu Fasaha da Masu Gudanar da Sabis da Tsarin. Misali a cikin Blog ɗinmu muna da labarai masu kyau guda 2 game da shi, waɗanda sune: Izini da haƙƙoƙi a cikin Linux (01/12) y Izini na asali a cikin GNU / Linux tare da chmod (08/16).

Amma sau da yawa SW Masu haɓakawa su wa ke kirkirar Aikace-aikace da Tsaruka, galibin su Tsari da Yanar gizo, yayin haɓaka su, yawanci basa la'akari da wanene ingantattun izini da za'a aiwatar akan su, barin aikin kusan koyaushe a gefen Sabar da Masu Gudanar da Tsarin. A cikin wannan littafin za mu yi ƙoƙari mu ba da ɗan jagora game da wannan game da su.

Gabatarwar

Umurnin "chmod»Yana da matukar amfani kuma yana da mahimmanci don ingantaccen amfani da tsarin Gudanar da Linux. Koyaya, kamar yadda "chmod" ba kunshin keɓe bane, amma an haɗa shi cikin kunshin "ainihin«. Kunshin "coreutils" wani kunshi ne wanda yake samar da Tsarin Aiki da kayan aiki da yawa na sarrafa fayil, masu fassarar umarni, da sarrafa kalmomi. Kuma gaba ɗaya, an riga an shigar dashi ta hanyar tsoho a yawancin Linux Distros.

Musamman, wannan kunshin ya ƙunshi, ban da umarnin "chmod", umarni masu zuwa: arch base64 basename cat chcon chgrp chmod chown chroot cksum comm cp csplit yanke date dd d dir dir dircolors dirname du echo env fadada expr factor karya garken fmt agbo kungiyoyin mai masaukin baki shigar shigar mahada ln logname ls md5sum mkdir mkfifo mknod mktemp mv nicec noh numfmt od paste pathchk pinky pr printenv printf ptx pwd readlink realpath rm rmdir runcon sha * sum seq shred sleep sort split stat stty sum sync tac wuts tee tee test timeout touch tr gaskiya truncate tsort tty uname unexpand uniq unlink masu amfani vdir wc wanda whoami a.

A taƙaice, umarnin "chmod" yana ba da izinin mahimmin aiki na sarrafa fayil da izini na babban fayil ga duk masu amfani da Tsarin Aiki ke gudanarwa. Wannan saboda Linux ne a matsayin Operating System mai amfani ne da yawa, sabili da haka, yana buƙatar samar da yanayin aiki tare da tsarin izini don sarrafa saitin ayyukan izini akan fayiloli da kundayen adireshi, wanda ya haɗa da duk albarkatun tsarin da na'urori.

Abun ciki

Yi amfani da SW Developers

Mai Sabis da Mai Gudanar da Sabis (Sysadmin) lokacin yanke shawarar abin da izini don ba mai Amfani na matakin-X ko bayanin martaba a kan fayil X ko babban fayil, yana buƙatar sanin ainihin wane irin aiki ko hanyoyin da suke buƙatar aiwatarwa akansu. Dangane da Sabis ɗin Yanar gizo, Masu amfani za a iya rarraba su cikin nau'ikan 2:

1. Masu Amfani: Waɗanda ke da asusun mai amfani a kan sabar don shiga, suna da takamaiman dama, kuma waɗanda ke aiwatar da wasu canje-canje (kwafa / share / gyaggyarawa) a cikin Tsarin ko Yanar gizo da aka sanya ta hanyar SSH ko SFTP, misali.
2. Masu Amfani marasa Gudanarwa: Cewa ba su da asusun mai amfani a kan sabar, tunda su baƙi ne kawai ga Gidan yanar gizo da Tsarin Yanar Gizo. Sabili da haka, ba su da izini don samun damar fayiloli da manyan fayiloli kai tsaye, amma suna hulɗa da su, ta hanyar haɗin yanar gizon Gidan yanar gizon ko Tsarin Yanar gizo da aka girka.

Koyaya, lokacin da Sysadmin bai karɓi isashshe ko isa ba bayani, takardu, ko tallafi daga SW Masu haɓakawa akan iyawa, aiki ko tsarin fayil ɗin Gidan yanar gizo da Tsarin tsarin da za'a girka ya ƙare har ya cika iyakar abin dogara, wanda a wannan yanayin yawanci:

chmod 777 -R /var/www/sistema-web

Kuma sau da yawa yana ƙare da:

chown root:root -R /var/www/sistema-web

Gargadi

Wannan yawanci mummunan aiki ne, amma yawanci yana guje wa duk wata matsala ta izini da mummunan aiwatar da shigar da Gidan yanar gizon da Tsarin. Mummunan aiki, tunda lokacin da aka zartar da umarnin chmod 777 ta wannan hanyar akan babban fayil da fayilolin Yanar gizo ko Tsarin Yanar gizo, babu tsaro ko kaɗan game da shi.

Bayar da damar kowane mai amfani da Yanar Gizo ko Tsarin Yanar Gizo akan layi don canzawa ko share kowane fayil a cikin tsarin fayil ɗin Gidan ko Tsarin Gidan yanar gizo a cikin Gidan Gidan yanar gizo ko gaba, ba tare da manyan matsaloli ba. Tunda dole ne a tuna cewa sabar yanar gizo ce ke aiki a madadin masu amfani da ziyartar, kuma tana da ikon canza fayilolin da ake aiwatarwa.

Kuma idan mai amfani ya kasance mai kawo hari ne, kuma ya sami rauni a cikin Yanar gizo ko Tsarin Yanar gizo, zai iya amfani da shi cikin sauƙi don ɓata shi, musaki shi, ko mafi muni duk da haka shigar da lambar ƙira don aiwatar da harin leƙen asirri, ko satar bayanai daga saba ba tare da kowa ya sani ba.

Shawara

Don kauce wa waɗannan nau'ikan matakan, ko dai Sysadmin ko SW Developer, dole ne su tabbatar da cewa manyan fayiloli da fayilolin nau'ikan Tsarin Mulki ko Yanar gizan suna ɗauke da madaidaitan izini da kuma masu amfani don kaucewa matsalolin tsaro da sirri na gaba.

A matakin izini, ana iya aiwatar da waɗannan umarnin 3 masu zuwa don dawo da izini da masu amfani da tsarin da aka girka ko Yanar gizo zuwa al'ada.Watau, saita darajar 755 zuwa duk kundayen adireshi da 644 zuwa fayiloli.

Koyaushe tuna ku don aiwatar da su a cikin tsarin fayil ko Yanar gizo, tunda idan aka kashe su a cikin babban fayil (shugabanci), kamar, misali, tushen uwar garke, umarnin umarni zasu sake jujjuya dukkan izinin Server, tare da barin mai yuwuwar aiki.

Misalai

Kundayen adireshi da izini na fayiloli

find . -type d -exec chmod 755 {} \;

find . -type f -exec chmod 644 {} \;

y

chmod 777 -R .

o

chmod 777 -R /var/www/sistema-web

Idan kana waje da fayil (directory) na System ko Yanar Gizo.

Tsarin ko Masu amfani da Yanar Gizo

chown www-data:www-data -R .

o

chown www-data:www-data -R /var/www/sistema-web

Idan kana waje da fayil (directory) na System ko Yanar Gizo. Kuma ana amfani da mai amfani da www-data ne kawai a matsayin misali, tunda shine mafi amfani dashi ko dacewa gwargwadon amfani da Apache2.

Da zarar an canza canje-canjen izini, zamu iya ci gaba da haɓaka izinin izini da fayilolin da muke son samun izini daban-daban da hannu. Kuma idan ya zama dole kuma za a canza masu amfani da wadanda suka cancanta. Sabili da haka, a wannan gaba, duka Sysadmin da SW Masu haɓakawa dole ne su yarda da abin da izinin izini yakamata ya kasance ga kowane babban fayil da fayil a cikin Tsarin ko Tsarin Gidan yanar gizo.

ƙarshe

Gudanar da izini a kan fayiloli da manyan fayilolin Linux ko UNIX tsarin aiki shine ɗayan manyan fa'idodi da fa'ida iri ɗaya., tunda suna ba da izini mafi kyau, madaidaici kuma mai aminci na matakan matakan samun dama, bugu da aiwatarwa akan fayiloli da manyan fayiloli.

Kuma fiye da haka, idan akazo kan matakin Sabar Gidan yanar gizo, ma'ana, inda ake karbar Tsarukan yanar gizo ko Gidajen Yanar Gizo na ciki da waje na Organizationungiyar, tunda shine babban fifiko don sanin waɗanne izini ya kamata a sanya wa kowane kundin adireshi ko fayil, don samun mafi daidaituwa tsakanin sirri, tsaro da aiki.