first commit

This commit is contained in:
iProbe 2022-10-18 16:59:37 +08:00
commit ba848e218d
1001 changed files with 152333 additions and 0 deletions

6
shell/safe/06-limit.sh Normal file
View file

@ -0,0 +1,6 @@
#!/bin/bash
# 禁止非whell组用户使用su切换用户
sed -i '/pam_wheel.so use_uid$/a\auth\t\trequired\tpam_wheel.so use_uid' /etc/pam.d/su
# 只允许wheel组中的用户使用su
sed -i '$a\SU_WHEEL_ONLY yes' /etc/login.defs