当前页面位置: » 丰搜网 » 文档中心 » 详细内容
使用solaris的初步设置
本人声明如需转载请保留如下信息：
作者： llzqq
mail： llzqq@126.com
from: www.chinaunix.net
1．配置root用户ssh登陆
# vi /etc/ssh/sshd_config
listenaddress 192.168.0.10
permitrootlogin yes
# > /etc/motd
# vi /etc/default/init
lang=zh
2．取消几个影响系统启动的timeout
# vi /etc/bootrc
set boot_timeout 0
# vi /boot/solaris/bootenv.rc
setprop auto-boot-timeout 0
setprop boottimeout '0'
# vi /boot/solaris/strap.rc
options timeout=0
3．取消自动关机
# vi /etc/power.conf
#autoshutdown 30 9:00 9:00 default
4．设置用户的环境变量
# vi /etc/passwd
root:x:0:1:super-user:/:/usr/bin/bash
# vi /.bashrc
ps1='[\u@\h \w]\$'
path=$path:/bin:/sbin:/usr/bin:/usr/ucb:/usr/sbin:/etc:/usr/local/bin:/usr/local/sbin:/usr/ccs/bin:/usr/sfw/bin
manpath=$manpath:/usr/man:/usr/local/man:/opt/sfw/man
ld_library_path=/usr/lib:/usr/dt/lib:/usr/openwin/lib:/usr/sfw/lib:
/usr/local/lib:/usr/local/ssl/lib
cc=gcc
export ps1 path manpath ld_library_path cc
export editor=vim
umask 022
tmout=1800
# vi .bash_profile
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi
5．安装常用软件包
top工具：
# gzip -d top-3.5beta12.5-sol9-intel-local.gz
# pkgadd -d top-3.5beta12.5-sol9-intel-local
vim工具：
# gzip -d ncurses-5.3-sol9-intel-local.gz
# pkgadd -d ncurses-5.3-sol9-intel-local
# gzip -d vim-6.2-sol9-intel-local.gz
# pkgadd -d vim-6.2-sol9-intel-local
# mv /bin/vi /bin/vi.bak
# ln -s /usr/local/bin/vim /bin/vi
# cp /usr/local/share/vim/vim62/vimrc_example.vim /.vimrc
# vi /.vimrc
把其中的：
set backup " keep a backup file
修改为：
set nobackup " keep a backup file
# vi /etc/hosts
加一条记录：
192.168.0.15 win2k
gcc工具：
# gzip -d libiconv-1.8-sol9-intel-local.gz
# gzip -d gcc-3.3.2-sol9-intel-local.gz
# pkgadd -d libiconv-1.8-sol9-intel-local
# pkgadd -d gcc-3.3.2-sol9-intel-local
make工具：
# gzip -d make-3.80-sol9-intel-local.gz
# gzip -d automake-1.7.2-sol9-intel-local.gz
# pkgadd -d make-3.80-sol9-intel-local
# pkgadd -d automake-1.7.2-sol9-intel-local
mozilla：
# pkgrm sunwnsb sunwnsm sunwnspsm sunwnsxp
# gzip -d mozilla-i386-pc-solaris2.8-1.6.pkg.tar.gz
# tar -vxf mozilla-i386-pc-solaris2.8-1.6.pkg.tar
# cd mozilla-1.6-x86
# pkgadd -d mozmozilla.pkg
# gzip -d flash_player_6_solaris_intel.tar.gz
# tar vxf flash_player_6_solaris_intel.tar
# cd install_flash_player_6_solaris
# cp * /usr/local/lib/mozilla-1.6/plugins
# cd /usr/local/lib/mozilla-1.6/plugins
# ln –s /usr/j2se/jre/plugin/i386/ns610/libjavaplugin_oji.so
# /usr/local/bin/mozilla
others:
# pkgadd -d expat-1.95.5-sol9-intel-local
# pkgadd -d gdbm-1.8.3-sol9-intel-local
# pkgadd -d openssl-0.9.7d-sol9-intel-local
# pkgadd -d libgcc-3.3-sol9-intel-local
# pkgadd -d libpcap-0.8.1-sol9-intel-local
# pkgadd -d tcp_wrappers-7.6-sol9-intel-local
# pkgadd -d tcpdump-3.8.1-sol9-intel-local
# pkgadd -d zlib-1.2.1-sol9-intel-local
# pkgadd -d lsof-4.68-sol9-intel-local
6．安装apache-2.0.49
# pkgrm sunwapchd sunwapchr sunwapchu
# gzip -d apache-2.0.49-sol9-intel-local.gz
# pkgadd -d apache-2.0.49-sol9-intel-local
# cp /usr/local/apache2/bin/apachectl /etc/rc3.d/s50apache
# chmod 744 /etc/rc3.d/s50apache
# chown root:sys /etc/rc3.d/s50apache
# 配置/usr/local/apache2/conf/httpd.conf过程略。
# smcapach2
7．安装openssh-3.8
# pkgrm sunwsshcu sunwsshdr sunwsshdu sunwsshr sunwsshu
# gzip -d openssh-3.8p1-sol9-intel-local.gz
# pkgadd -d openssh-3.8p1-sol9-intel-local
# mkdir /var/empty
# chown root:sys /var/empty
# chmod 755 /var/empty
# groupadd sshd
# useradd -g sshd -c "arthur sshd privsep" -d /var/empty -s /bin/false sshd
# ssh-keygen -t rsa1 -f /usr/local/etc/ssh_host_key -n ""
# ssh-keygen -t dsa -f /usr/local/etc/ssh_host_dsa_key -n ""
# ssh-keygen -t rsa -f /usr/local/etc/ssh_host_rsa_key -n ""
# vi /etc/init.d/sshd
===========================sshd============================
#!/sbin/sh
#
# copyright (c) 2004 by llzqq
# all rights reserved.
# mail: llzqq@126.com
#ident "@(#)sshd 1.1 01/09/24 smi"
case "$1" in
start)
/usr/local/sbin/sshd
;;
stop)
pkill sshd
;;
*)
echo "usage: $0 { start stop }"
exit 1
;;
esac
exit 0
===========================sshd============================
# chmod 750 /etc/init.d/sshd
# chown root:sys /etc/init.d/sshd
# ln –s /etc/init.d/sshd /etc/rc2.d/s98sshd
# vi /etc/hosts.deny
sshd:all
# vi /etc/hosts.allow
sshd:192.168.0.15
# rm /.ssh/*
8．安装samba-3
# cp /etc/rc3.d/s90samba bak.s90samba
# pkgrm sunwsmbac sunwsmbar sunwsmbau
# gzip -d samba-3.0.2a-sol9-intel-local.gz
# gzip -d popt-1.7-sol9-intel-local.gz
# pkgadd -d popt-1.7-sol9-intel-local
# pkgadd -d samba-3.0.2a-sol9-intel-local
# cd /usr/local/samba/doc/samba/examples/
# cp smb.conf.default /usr/local/samba/lib/smb.conf
# 设置smb.conf文件过程略
# mv /etc/rc3.d/bak.s90samba s90samba
# chown root:sys /etc/rc3.d/s90samba
# vim /etc/rc3.d/s90samba
=======================s90samba========================
#!/sbin/sh
#
# copyright (c) 2004 by llzqq
# all rights reserved.
# mail: llzqq@126.com
#ident "@(#)samba 1.1 01/09/24 smi"
case "$1" in
start)
[ -f /usr/local/samba/lib/smb.conf ] exit 0
/usr/local/samba/sbin/smbd -d
/usr/local/samba/sbin/nmbd -d
;;
stop)
pkill smbd
pkill nmbd
;;
*)
echo "usage: $0 { start stop }"
exit 1
;;
esac
exit 0
=======================s90samba========================
9．初步的系统安全设置
为安全起见在/etc/.netd.conf中注释掉除下列服务的所有服务
ftp
echo
echo
discard
discard
rstatd/2-4
fs
100083/1
在只需要不多图形操作的服务器或是要保证相当的安全，你也许应该关掉字体服务fs，也可以关掉系统性能监视器rstatd和tooltalk服务器ttdbserverd（100083/1）,查找剩下需要关闭的端口的进程用这个命令：
# /usr/local/bin/lsof -i grep port
为安全起见在防止堆栈溢出
# cp /etc/system /etc/system.backup
# vi /etc/system
在文件的最后，加上以下两行：
set noexec_user_stack=1
set noexec_user_stack_log=1
禁用自动启动desktop
# /usr/dt/bin/dtconfig –d
为安全起见停掉几个系统服务：
卸载sendmail：
# pkgrm sunwsndmr sunwsndmu
卸载te.net：
# pkgrm sunw.netc sunw.netd sunw.netr
# cd /etc/rc2.d
# mv s71ldap.client _s71ldap.client
# mv s72.netsvc _s72.netsvc
# mv s74autofs _s74autofs
# mv s74xntpd _s74xntpd
# mv s80lp _s80lp
# mv s71rpc _s71rpc
# mv s73nfs.client _s73nfs.client
# cd /etc/rc3.d
# mv s34dhcp _s34dhcp
# mv s15nfs.server _s15nfs.server
# mv s76snmpdx _s76snmpdx
卸载pcmcia支持：
# pkgrm sunwpcelx sunwpcmci sunwpcmcu sunwpcmem sunwpcser sunwpsdpr
安装port扫描工具nmap
# gzip -d nmap-3.50-sol9-intel-local.gz
# gzip -d pcre-4.5-sol9-intel-local.gz
# pkgadd -d nmap-3.50-sol9-intel-local
# pkgadd -d pcre-4.5-sol9-intel-local
扫描本机端口：
# nmap -p0 -st localhost
安装网络漏洞扫描工具nessus:
# gzip -d nessus-2.0.9-sol9-intel-local.gz
# pkgadd -d nessus-2.0.9-sol9-intel-local
建立ssl证书：
# nessus-mkcert
添加nessus用户：
# nessus-adduser
以root启动nessus服务器：
# nessus –d
启动nessus的gui客户端：
# nessus
