Linux权限管理

ROOT：
useradd hadoop1
passwd  ******
useradd hadoop2
passwd ******

mkdir /soft
1,权限修正：
chmod  770  soft   |  chmod  o-rwx g+rwx   soft
2,修正属组
groupadd module
usermod -a -G module hadoop1
usermod -a -G module hadoop2
chown  root:module soft
chown :sxtswap   ooxx.file
chmod  770 ooxx.file
id  username

[root@localhost /]# mkdir soft
[root@localhost /]# ll
total 98
dr-xr-xr-x.  2 root root  4096 Dec 21 16:17 bin
dr-xr-xr-x.  5 root root  1024 Dec 21 16:17 boot
drwxr-xr-x  18 root root  3680 Dec 22 17:31 dev
drwxr-xr-x. 61 root root  4096 Dec 22 17:43 etc
drwxr-xr-x.  4 root root  4096 Dec 22 17:42 home
dr-xr-xr-x.  8 root root  4096 Dec 21 16:16 lib
dr-xr-xr-x.  9 root root 12288 Dec 21 16:17 lib64
drwx------.  2 root root 16384 Dec 21 16:15 lost+found
drwxr-xr-x.  2 root root  4096 Sep 23  2011 media
drwxr-xr-x.  2 root root  4096 Sep 23  2011 mnt
drwxr-xr-x.  2 root root  4096 Sep 23  2011 opt
dr-xr-xr-x  86 root root     0 Dec 22 17:31 proc
dr-xr-x---.  2 root root  4096 Dec 21 17:03 root
dr-xr-xr-x.  2 root root 12288 Dec 21 16:17 sbin
drwxr-xr-x.  2 root root  4096 Dec 21 16:16 selinux
drwxr-xr-x   2 root root  4096 Dec 22 17:44 soft
drwxr-xr-x.  2 root root  4096 Sep 23  2011 srv
drwxr-xr-x  13 root root     0 Dec 22 17:31 sys
drwxrwxrwt.  3 root root  4096 Dec 22 17:31 tmp
drwxr-xr-x. 13 root root  4096 Dec 21 16:16 usr
drwxr-xr-x. 17 root root  4096 Dec 21 16:16 var

把两个用户关联进同一个组module
[root@localhost /]# groupadd module
[root@localhost /]# id hadoop1
uid=500(hadoop1) gid=500(hadoop1) groups=500(hadoop1)
[root@localhost /]# usermod -a -G module hadoop1
[root@localhost /]# id hadoop1
uid=500(hadoop1) gid=500(hadoop1) groups=500(hadoop1),502(module)
[root@localhost /]# usermod -a -G module hadoop2
[root@localhost /]# id hadoop2
uid=501(hadoop2) gid=501(hadoop2) groups=501(hadoop2),502(module)

组和文件目录进行关联
修改用户所属的组
[root@localhost /]# chown root:module soft/
[root@localhost /]# ll
total 98
dr-xr-xr-x.  2 root root    4096 Dec 21 16:17 bin
dr-xr-xr-x.  5 root root    1024 Dec 21 16:17 boot
drwxr-xr-x  18 root root    3680 Dec 22 17:31 dev
drwxr-xr-x. 61 root root    4096 Dec 22 17:48 etc
drwxr-xr-x.  4 root root    4096 Dec 22 17:42 home
dr-xr-xr-x.  8 root root    4096 Dec 21 16:16 lib
dr-xr-xr-x.  9 root root   12288 Dec 21 16:17 lib64
drwx------.  2 root root   16384 Dec 21 16:15 lost+found
drwxr-xr-x.  2 root root    4096 Sep 23  2011 media
drwxr-xr-x.  2 root root    4096 Sep 23  2011 mnt
drwxr-xr-x.  2 root root    4096 Sep 23  2011 opt
dr-xr-xr-x  86 root root       0 Dec 22 17:31 proc
dr-xr-x---.  2 root root    4096 Dec 21 17:03 root
dr-xr-xr-x.  2 root root   12288 Dec 21 16:17 sbin
drwxr-xr-x.  2 root root    4096 Dec 21 16:16 selinux
drwxr-xr-x   2 root module  4096 Dec 22 17:44 soft
drwxr-xr-x.  2 root root    4096 Sep 23  2011 srv
drwxr-xr-x  13 root root       0 Dec 22 17:31 sys
drwxrwxrwt.  3 root root    4096 Dec 22 17:31 tmp
drwxr-xr-x. 13 root root    4096 Dec 21 16:16 usr
drwxr-xr-x. 17 root root    4096 Dec 21 16:16 var

给组加可写的权限
[root@localhost /]# chmod g+w soft/
[root@localhost /]# ll
total 98
dr-xr-xr-x.  2 root root    4096 Dec 21 16:17 bin
dr-xr-xr-x.  5 root root    1024 Dec 21 16:17 boot
drwxr-xr-x  18 root root    3680 Dec 22 17:31 dev
drwxr-xr-x. 61 root root    4096 Dec 22 17:48 etc
drwxr-xr-x.  4 root root    4096 Dec 22 17:42 home
dr-xr-xr-x.  8 root root    4096 Dec 21 16:16 lib
dr-xr-xr-x.  9 root root   12288 Dec 21 16:17 lib64
drwx------.  2 root root   16384 Dec 21 16:15 lost+found
drwxr-xr-x.  2 root root    4096 Sep 23  2011 media
drwxr-xr-x.  2 root root    4096 Sep 23  2011 mnt
drwxr-xr-x.  2 root root    4096 Sep 23  2011 opt
dr-xr-xr-x  86 root root       0 Dec 22 17:31 proc
dr-xr-x---.  2 root root    4096 Dec 21 17:03 root
dr-xr-xr-x.  2 root root   12288 Dec 21 16:17 sbin
drwxr-xr-x.  2 root root    4096 Dec 21 16:16 selinux
drwxrwxr-x   2 root module  4096 Dec 22 17:44 soft
drwxr-xr-x.  2 root root    4096 Sep 23  2011 srv
drwxr-xr-x  13 root root       0 Dec 22 17:31 sys
drwxrwxrwt.  3 root root    4096 Dec 22 17:31 tmp
drwxr-xr-x. 13 root root    4096 Dec 21 16:16 usr
drwxr-xr-x. 17 root root    4096 Dec 21 16:16 var
出去其他人对此目录的访问权限
[root@localhost /]# chmod o-rx soft/
[root@localhost /]# ll
total 98
dr-xr-xr-x.  2 root root    4096 Dec 21 16:17 bin
dr-xr-xr-x.  5 root root    1024 Dec 21 16:17 boot
drwxr-xr-x  18 root root    3680 Dec 22 17:31 dev
drwxr-xr-x. 61 root root    4096 Dec 22 17:48 etc
drwxr-xr-x.  4 root root    4096 Dec 22 17:42 home
dr-xr-xr-x.  8 root root    4096 Dec 21 16:16 lib
dr-xr-xr-x.  9 root root   12288 Dec 21 16:17 lib64
drwx------.  2 root root   16384 Dec 21 16:15 lost+found
drwxr-xr-x.  2 root root    4096 Sep 23  2011 media
drwxr-xr-x.  2 root root    4096 Sep 23  2011 mnt
drwxr-xr-x.  2 root root    4096 Sep 23  2011 opt
dr-xr-xr-x  86 root root       0 Dec 22 17:31 proc
dr-xr-x---.  2 root root    4096 Dec 21 17:03 root
dr-xr-xr-x.  2 root root   12288 Dec 21 16:17 sbin
drwxr-xr-x.  2 root root    4096 Dec 21 16:16 selinux
drwxrwx---   2 root module  4096 Dec 22 17:44 soft
drwxr-xr-x.  2 root root    4096 Sep 23  2011 srv
drwxr-xr-x  13 root root       0 Dec 22 17:31 sys
drwxrwxrwt.  3 root root    4096 Dec 22 17:31 tmp
drwxr-xr-x. 13 root root    4096 Dec 21 16:16 usr
drwxr-xr-x. 17 root root    4096 Dec 21 16:16 var

hadoop2无法对文件进行追加操作
[hadoop1@localhost soft]$ vi show.txt
[hadoop1@localhost soft]$ ll
total 4
-rw-rw-r-- 1 hadoop1 hadoop1 8 Dec 22 17:59 show.txt

改变hadoop1的组为module  hadoop1 和hadoop2都在同意个组
[hadoop1@localhost soft]$ chown hadoop1:module show.txt 
[hadoop1@localhost soft]$ ll
total 4
-rw-rw-r-- 1 hadoop1 module 8 Dec 22 17:59 show.txt

[hadoop2@localhost soft]$ vi show.txt 
[hadoop2@localhost soft]$ ll
total 4
-rw-rw-r-- 1 hadoop1 module 12 Dec 22 18:03 show.txt