云环境安全整改
1.用户安全
#!/bin/bash sed -i 's/PASS_MAX_DAYS/#PASS_MAX_DAYS/g' /etc/login.defs sed -i 's/PASS_MIN_DAYS/#PASS_MIN_DAYS/g' /etc/login.defs sed -i 's/PASS_MIN_LEN/#PASS_MIN_LEN/g' /etc/login.defs sed -i 's/PASS_WARN_AGE/#PASS_WARN_AGE/g' /etc/login.defs cat >> /etc/login.defs <<EOF PASS_MAX_DAYS 100 PASS_MIN_DAYS 7 PASS_MIN_LEN 8 PASS_WARN_AGE 7 EOF 验证 egrep -v "#|^$" /etc/login.defs chage --maxdays 100 root chage --mindays 7 root chage --warndays 7 root
2.密码安全
cat >>/etc/security/pwquality.conf <<EOF minlen=10 minclass=3 EOF #确认 grep "use_authtok" /etc/pam.d/system-auth grep "use_authtok" /etc/pam.d/password-auth #执行 sed -i 's#use_authtok#use_authtok remember=5#g' /etc/pam.d/password-auth sed -i 's#use_authtok#use_authtok remember=5#g' /etc/pam.d/system-auth