RHCSA 07 - 用户与群组管理

Posted 2022-07-04 王万林 Ben

RHEL 8在/etc/login.defs定义了新创建用户的属性，

[root@842fce284319 ~]# cat /etc/login.defs | grep -v '^#'

MAIL_DIR        /var/spool/mail

UMASK           022

HOME_MODE       0700

PASS_MAX_DAYS   99999
PASS_MIN_DAYS   0
PASS_MIN_LEN    5
PASS_WARN_AGE   7

UID_MIN                  1000
UID_MAX                 60000
SYS_UID_MIN               201
SYS_UID_MAX               999

GID_MIN                  1000
GID_MAX                 60000
SYS_GID_MIN               201
SYS_GID_MAX               999


CREATE_HOME     yes

USERGROUPS_ENAB yes

ENCRYPT_METHOD SHA512

修改密码有效期

[root@842fce284319 ~]# sed -i 's/99999/90/' /etc/login.defs

在/etc/skel文件夹里创建文件，任何在该目录下的文件将会被拷贝到新创建用户的家目录，

[root@842fce284319 ~]# echo hello > /etc/skel/greetings

创建用户anna，增加secondary群组sales，

[root@842fce284319 ~]# groupadd sales
[root@842fce284319 ~]# useradd -G sales anna
[root@842fce284319 ~]# echo mysecretpassword | passwd --stdin anna
Changing password for user anna.
passwd: all authentication tokens updated successfully.
[root@842fce284319 ~]# id anna
uid=1001(anna) gid=1002(anna) groups=1002(anna),1001(sales)

查看密码有效期，

[root@842fce284319 ~]# chage -l anna
Last password change                                    : Jul 02, 2022
Password expires                                        : Sep 30, 2022
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : 0
Maximum number of days between password change          : 90
Number of days of warning before password expires       : 7

查看anna的家目录，看/etc/skel的文件已经被copy过来了，

[root@842fce284319 ~]# ls -al /home/anna
total 16
drwx------. 2 anna anna  79 Jul  2 07:06 .
drwxr-xr-x. 4 root root  32 Jul  2 07:06 ..
-rw-r--r--. 1 anna anna  18 Jul 27  2021 .bash_logout
-rw-r--r--. 1 anna anna 141 Jul 27  2021 .bash_profile
-rw-r--r--. 1 anna anna 376 Jul 27  2021 .bashrc
-rw-r--r--. 1 anna anna   6 Jul  2 07:06 greetings