| C.Arthur 回复于:2003-11-26 15:13:24 |
| 只列了一部分吧 |
| guchengman 回复于:2003-11-26 15:17:59 |
| 有机会我再补充. |
| C.Arthur 回复于:2003-11-26 15:24:40 |
| 多谢 |
| lihuc 回复于:2003-11-26 16:02:53 |
| 看来应该叫汇总(一) |
| kerry.xyz 回复于:2003-11-27 08:01:00 |
| 谢谢,偶受益匪浅,期待着继续添加。 |
| race 回复于:2003-11-27 08:08:13 |
| 欢迎补充,大家一起补充 |
| treezt 回复于:2003-11-27 10:45:15 |
| 好贴 |
| wangfan 回复于:2003-11-27 11:53:17 |
| 不错! |
| snowbelial 回复于:2003-11-27 13:29:50 |
| good |
| mmmmn 回复于:2003-11-27 17:55:05 |
| /etc/logindevperm 包含信息在操纵台注册号上用许可换设备。
什么玩意?自己翻的? |
| chly63 回复于:2003-11-27 20:15:20 |
| 建议整理为精华! |
| guchengman 回复于:2003-11-27 22:22:30 |
| 呵呵,
只有mmmmn能找出我的错误来. 说句老实话我对这个文件也不懂,手头的资料不全,所以我就直译的。 问题题出来了, 我查了一下资料. 这是我在"永远的UNIX"查找到的资料: 7. /etc/logindevperm文件包含的配置信息用于设置登录相关设备(控制台、键盘等)的权限,检查该文件中的权限设置,如果必要可以修改成期望值。关于该文件更多信息参看logindevperm(4)手册页。 man结果: File Formats logindevperm(4) NAME logindevperm, fbtab - login-based device permissions SYNOPSIS /etc/logindevperm DESCRIPTION The /etc/logindevperm file contains information that is used by login(1) and ttymon(1M) to change the owner, group, and permissions of devices upon logging into or out of a console device. By default, this file contains lines for the key- board, mouse, audio, and frame buffer devices. The owner of the devices listed in /etc/logindevperm is set to the owner of the console by login(1). The group of the devices is set to the owner's group specified in /etc/passwd. The permissions are set as specified in /etc/logindevperm. Fields are separated by TAB and/or SPACE characters. Blank lines and comments can appear anywhere in the file; comments start with a hashmark, ` # ', and continue to the end of the line. The first field specifies the name of a console device (for example, /dev/console). The second field specifies the per- missions to which the devices in the _d_e_v_i_c_e__l_i_s_t field (third field) will be set. A _d_e_v_i_c_e__l_i_s_t is a colon- separated list of device names. A device entry that is a directory name and ends with "/*" specifies all entries in the directory (except "." and ".."). For example, "/dev/fbs/*" specifies all frame buffer devices. Once the devices are owned by the user, their permissions and ownership can be changed using chmod(1) and chown(1), as with any other user-owned file. Upon logout the owner and group of these devices will be reset by ttymon(1M) to owner root and root's group as speci- fied in /etc/passwd (typically other). The permissions are set as specified in the /etc/logindevperm file. FILES /etc/passwd File that contains user group information. SEE ALSO chmod(1), chown(1), login(1), ttymon(1M), passwd(4) NOTES /etc/logindevperm provides a superset of the functionality provided by /etc/fbtab in SunOS 4.x releases. SunOS 5.8 Last change: 16 August 1993 1 |
| guchengman 回复于:2003-11-27 22:28:19 |
| 另一些资料以供补充:
控制对显示设备的访问也是提高安全性的一种方法。通常这是由Dtlogin和login进程(ttymon)来管理的。但我们现在将dtlogin禁止了,那么这个任务必须由xsun.server来完成。xsun.server通过改变显示设备的所有权来控制用户对servlets的运行。当一个用户登陆到系统控制台的时候,loging进程(ttymon)将把各种设备的所有权以及限制赋予用户。而现在因为是xsun.server控制着显示设备,所以要通过修改ttymon的配置文件/etc/logindevperm来去禁止对显示设备访问。 |
| solaris2.6 回复于:2004-01-12 09:16:12 |
| 好帖,感谢 |