mindg.cn

sudo在日常运维中我们经常使用的工具，可以给普通用户授予root用户权限执行某些特殊操作，但这里也有个问题，在设置完后，普通用户通过su -i 仍然可以切到root用户下，那如何防止呢，我们就从基本的先看看如何设置sudo用户：

新建文件webadminsudo 写入：

webadmin ALL=(ALL) NOPASSWD:ALL,!/usr/bin/passwd,!/bin/bash,!/bin/sh,!/bin/tcsh,!/bin/su

看我配置文件内容，sudo -i 默认是调用bash命令切换到root的shell下获取root权限的所有只要禁用bash就可以了.

这样用户就无法切到root用户下了，简单吧。

从网上还看到其它例子，可以增加更多限制，可以参考：

另一个例子：

Cmnd_Alias DENYCMD = !/bin/su,!/usr/bin/passwd,!/usr/bin/passwd root,!/bin/vi /etc/sudoers,!/usr/bin/vim /etc/sudoers,!/usr/sbin/visudo,!/usr/bin/sudo -i,!/bin/vi /etc/ssh/*,!/usr/bin/vim /etc/ssh/*,!/bin/chmod 777 /etc/*,!/bin/chmod 777 *,!/bin/chmod 777,!/bin/chmod -R 777 *

Cmnd_Alias DENYRMCMD = !/bin/rm /*,!/bin/rm /,!/bin/rm -rf /,!/bin/rm -rf /*,!/bin/rm /etc,!/bin/rm -r /etc,!/bin/rm -rf /etc,!/bin/rm /etc/*,!/bin/rm -r /etc/*,!/bin/rm -rf /etc/*,!/bin/rm /root,!/bin/rm -r /root,!/bin/rm -rf /root,!/bin/rm /root/*,!/bin/rm -r /root/*,!/bin/rm -rf /root/*,!/bin/rm /bin,!/bin/rm -r /bin,!/bin/rm -rf /bin,!/bin/rm /bin/*,!/bin/rm -r /bin/*,!/bin/rm -rf /bin/*

!/bin/su

YANFA ALL=(ALL) NOPASSWD:ALL,DENYCMD,DENYRMCMD

这样会增加更多限制。

还有一个问题，有时候普通用户切root需要输入密码，有时候很是很烦人，下面提供一个方法，可以不用输密码了，哈：

如何su – root不需要密码：

vi /etc/pam.d/su

将 auth这一列的注释号去除

# Uncomment the following line to implicitly trust users in the “wheel” group.

auth sufficient pam_wheel.so trust use_uid

然后将登陆用户加入 wheel组

usermod -G wheel martin

设置完成测试。

这篇介绍mongodb和Python使用，从基本的安装说起，先熟练mongodb的基本操作，然后通过python实现数据插入、查询，以及mongoengine使用，最后是图形化界面连接mongodb数据库，我们从安装开始：

Mongodb 安装

wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel62-3.6.4.tgz

tar -zxvf mongodb-linux-x86_64-rhel62-3.6.4.tgz

mv mongodb-linux-x86_64-rhel62-3.6.4 /usr/local/mongodb

添加环境变量：/etc/profille

MONGODB=/usr/local/mongodb

PATH=$MONGODB/bin:$PATH

export PATH

配置文件：

Vi /etc/mongod.conf

# mongod.conf

# for documentation of all options, see:

#   http://docs.mongodb.org/manual/reference/configuration-options/

# where to write logging data.

systemLog:

  destination: file

  logAppend: true

  path: /var/log/mongodb/mongod.log

 
# Where and how to store data.

storage:

  dbPath: /var/lib/mongo

  journal:

    enabled: true

#  engine:

#  mmapv1:

#  wiredTiger:

 

# how the process runs

processManagement:

  fork: true  # fork and run in background

  pidFilePath: /var/run/mongodb/mongod.pid  # location of pidfile

  timeZoneInfo: /usr/share/zoneinfo

 

# network interfaces

net:

  port: 27017

  bindIp: 127.0.0.1,192.168.137.131  # Listen to local interface only, comment to listen on all interfaces.

#security:


#operationProfiling:


#replication:
 

#sharding:

 

## Enterprise-Only Options


#auditLog:

#snmp:

# mongod.conf

# for documentation of all options, see:

# http://docs.mongodb.org/manual/reference/configuration-options/

# where to write logging data.

systemLog:

destination: file

logAppend: true

path: /var/log/mongodb/mongod.log

# Where and how to store data.

storage:

dbPath: /var/lib/mongo

journal:

enabled: true

# engine:

# mmapv1:

# wiredTiger:

# how the process runs

processManagement:

fork: true # fork and run in background

pidFilePath: /var/run/mongodb/mongod.pid # location of pidfile

timeZoneInfo: /usr/share/zoneinfo

# network interfaces

net:

port: 27017

bindIp: 127.0.0.1,192.168.137.131 # Listen to local interface only, comment to listen on all interfaces.

#security:

#operationProfiling:

#replication:

#sharding:

## Enterprise-Only Options

#auditLog:

#snmp:

启动：

mkdir -p /data/db

mongod &

关闭：

mongod –shutdown –dbpath /data/db

登录数据库关闭：

Mongo //进入客户端

use admin;

db.shutdownServer();

#python升级后pip不能使用，重新安装，你如果pip没问题，不用操作这些步骤。

curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py

python get-pip.py

python -m pip install pymongo

以下是python和mango 的一些脚本程序：

脚本1：插入数据

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.blog

post = {"author": "Maxsu",

         "text": "My first blog post!",

         "tags": ["mongodb", "python", "pymongo"],

         "date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

#print ("post id is ", post_id)

pprint.pprint(posts.find_one())

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.blog

post = {"author": "Maxsu",

"text": "My first blog post!",

"tags": ["mongodb", "python", "pymongo"],

"date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

#print ("post id is ", post_id)

pprint.pprint(posts.find_one())

脚本2：

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

post = {"author": "Minsu",

         "text": "This blog post belong to Minsu!",

         "tags": ["MySQL", "Oracle", "pymongo"],

         "date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

post = posts.find_one({"author": "Maxsu"})

pprint.pprint(post)

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

post = {"author": "Minsu",

"text": "This blog post belong to Minsu!",

"tags": ["MySQL", "Oracle", "pymongo"],

"date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

post = posts.find_one({"author": "Maxsu"})

pprint.pprint(post)

#脚本3：多查询

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

posts = db.posts

for post in posts.find():

    pprint.pprint(post)

#查询count数量

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

posts = db.posts

print("posts count is = ", posts.count())

print("posts's author is Maxsu count is =", posts.find({"author": "Maxsu"}).count())

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

posts = db.posts

for post in posts.find():

pprint.pprint(post)

#查询count数量

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

posts = db.posts

print("posts count is = ", posts.count())

print("posts's author is Maxsu count is =", posts.find({"author": "Maxsu"}).count())

#脚本4：插入一个对象

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

post = {"_id": 100,

         "author": "Kuber",

         "text": "This is is my first post!",

         "tags": ["Docker", "Shell", "pymongo"],

         "date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

print("post_id is :", post_id)

post = posts.find_one({"_id": post_id})

print("Find By Post ID:")

pprint.pprint(post)

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

post = {"_id": 100,

"author": "Kuber",

"text": "This is is my first post!",

"tags": ["Docker", "Shell", "pymongo"],

"date": datetime.datetime.utcnow()}

posts = db.posts

post_id = posts.insert_one(post).inserted_id

print("post_id is :", post_id)

post = posts.find_one({"_id": post_id})

print("Find By Post ID:")

pprint.pprint(post)

#脚本5：多对象插入

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

new_posts = [{"_id": 1000,

               "author": "Curry",

               "text": "Another post!",

               "tags": ["bulk", "insert"],

               "date": datetime.datetime(2017, 11, 12, 11, 14)},

              {"_id": 1001,"author": "Maxsu",

               "title": "MongoDB is fun",

               "text": "and pretty easy too!",

               "date": datetime.datetime(2019, 11, 10, 10, 45)}]

posts = db.posts

result = posts.insert_many(new_posts)

print("Bulk Inserts Result is :", result.inserted_ids)

#!/usr/bin/env python

#coding=utf-8

import datetime

import pprint

from pymongo import MongoClient

client = MongoClient()

db = client.pythondb

new_posts = [{"_id": 1000,

"author": "Curry",

"text": "Another post!",

"tags": ["bulk", "insert"],

"date": datetime.datetime(2017, 11, 12, 11, 14)},

{"_id": 1001,"author": "Maxsu",

"title": "MongoDB is fun",

"text": "and pretty easy too!",

"date": datetime.datetime(2019, 11, 10, 10, 45)}]

posts = db.posts

result = posts.insert_many(new_posts)

print("Bulk Inserts Result is :", result.inserted_ids)

以下是mongoengine使用,这个可能之前有人没接触过，你可以理解为类似django中的orm的使用，就是可以通过定义class 来定义数据库表和字段，使用也不复杂，它提供了很多方法供我们使用，官网参考：http://docs.mongoengine.org/

# mongoengine使用：

pip install -U mongoengine

脚本6：

from mongoengine import *

connect('test', host='localhost', port=27017)

#import datetime

from datetime import datetime

class Users(Document):

    name = StringField(required=True, max_length=200)

    age = IntField(required=True)

class Categories(Document):

    name = StringField(max_length=30, required=True)

    artnum = IntField(default=0, required=True)

    date = DateTimeField(default=datetime.now(), required=True)

class Posts(Document):

    title = StringField(max_length=100, required=True)

    content = StringField(required=True)

    tags = ListField(StringField(max_length=20, required=True), required=True)

    categories = ReferenceField(Categories)

user1 = Users(

    name='zz',

    age= 11

)

user1.save()  

print(user1.name)

user1.name = 'zz11'

user1.save()      

print(user1.name)

from mongoengine import *

connect('test', host='localhost', port=27017)

#import datetime

from datetime import datetime

class Users(Document):

name = StringField(required=True, max_length=200)

age = IntField(required=True)

class Categories(Document):

name = StringField(max_length=30, required=True)

artnum = IntField(default=0, required=True)

date = DateTimeField(default=datetime.now(), required=True)

class Posts(Document):

title = StringField(max_length=100, required=True)

content = StringField(required=True)

tags = ListField(StringField(max_length=20, required=True), required=True)

categories = ReferenceField(Categories)

user1 = Users(

name='zz',

age= 11

)

user1.save()

print(user1.name)

user1.name = 'zz11'

user1.save()

print(user1.name)

#脚本7 get user

users = Users.objects.all()

for u in users:

    print("name:",u.name,",age:", u.age)

cate =Categories(name="Linux")

cate.save()

post = Posts(title="Linuxzen.com", content="Linuxzen.com",tags=["Linux","web"], categories=cate)

post.save()

cate = Posts.objects.all().first().categories

print cate

print cate.name

cate = Categories.objects(name="Linux").first()

print Posts.objects(categories=cate).next

users = Users.objects.all()

for u in users:

print("name:",u.name,",age:", u.age)

cate =Categories(name="Linux")

cate.save()

post = Posts(title="Linuxzen.com", content="Linuxzen.com",tags=["Linux","web"], categories=cate)

post.save()

cate = Posts.objects.all().first().categories

print cate

print cate.name

cate = Categories.objects(name="Linux").first()

print Posts.objects(categories=cate).next

官网参考：http://docs.mongoengine.org/

操作mongo数据库用图形化还是很直观，我推荐用官网的Mongodb-compas:

图形化客户端连接：

Mongodb-compas下载

https://www.mongodb.com/download-center?jmp=hero#compass

下载安装：

一	二	三	四	五	六	日
« 六
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31

Python Aws DevOps

sudo 防止su -i 切到root下

python+mongodb操作方法全（附源码和图形客户端Mongodb-compass）

selenium + chrome爬虫环境搭建

windows下安装selenium报错解决

tomcat杀进程方法