echo 開啟ssh通道
start plink -ssh -L 6000:63.32.141.12:3389 -C -pw 密碼 webadmin@63.32.141.1
echo 遠端連線
start mstsc /v:127.0.0.1:6000
echo 完成,結束後請使用 exit 離開所有終端機畫面
# 安裝 telnet server [root@sc220469 ~]# yum install telnet-server -y # 開啟 telnet 從 xinetd 的設定內 [root@sc220469 ~]# chkconfig telnet on # 重新啟動 telnet [root@sc220469 ~]# /etc/init.d/xinetd restart # 檢查 port 23 有沒有開 [root@sc220469 ~]# netstat -tnulp | grep 23 tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 10008/xinetd # 本機連線測試 [root@sc220469 ~]# telnet localhost Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. Red Hat Enterprise Linux Server release 5.4 (Tikanga) Kernel 2.6.18-164.el5 on an i686 login: Login incorrect # 限制對外的網卡不能連線，只有(163.112.69.13)的可以連線 [root@sc220469 ~]# vim /etc/hosts.allow in.telnetd:163.112.69.13:allow in.telnetd:ALL:deny
mtchang@mtchang-work:~$ ssh -2 -N -f -L 6023:163.112.69.204:23 mtchang@163.112.69.13 # -2 這迫使ssh 使用2.0 版的協定。 # -N 不指出命令，而只有通道。如果忽略了 ssh 將初始化一個普通的連線會話。 # -f 使ssh在背景運行ssh。 # -L 以 localport:localhost:remoteport 的初始化一個本地通道。
mtchang@mtchang-work:~$ ps auxw | grep 6023 mtchang 2440 0.0 0.0 5284 636 ? Ss 00:03 0:00 ssh -2 -N -f -L 6023:163.112.69.204:23 mtchang@163.112.69.13
mtchang@mtchang-work:~$ netstat -tnulp | grep 23 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:6023 0.0.0.0:* LISTEN 2309/ssh tcp6 0 0 ::1:6023 :::* LISTEN 2309/ssh
mtchang@mtchang-work:~$ telnet localhost 6023 Trying ::1... Connected to localhost. Escape character is '^]'. Red Hat Enterprise Linux Server release 5.4 (Tikanga) Kernel 2.6.18-164.el5 on an i686 ?in: mtchang Password: Last login: Mon Jan 25 07:53:35 from sc21369 [mtchang@sc220469 ~]$
[root@sc220469 ~]# netstat -tnula | grep 23 tcp 0 0 163.112.69.204:23 163.112.69.13:41151 ESTABLISHED 10395/in.telnetd: s
[mtchang@code ~]$ netstat -tnula | grep 23 tcp 0 0 163.112.69.13:41151 163.112.69.204:23 ESTABLISHED
mtchang@mtchang-work:~$ ps axuw | grep ssh mtchang 2440 0.0 0.0 5400 1032 ? Ss 00:03 0:00 ssh -2 -N -f -L 6023:163.112.69.204:23 mtchang@163.112.69.13 mtchang 2468 0.0 0.0 3056 788 pts/1 S+ 00:13 0:00 grep ssh mtchang@mtchang-work:~$ kill 2440
[mtchang@sc220469 key]$ openssl rsautl --help Usage: rsautl [options] -in file input file -out file output file -inkey file input key -keyform arg private key format - default PEM -pubin input is an RSA public -certin input is a certificate carrying an RSA public key -ssl use SSL v2 padding -raw use no padding -pkcs use PKCS#1 v1.5 padding (default) -oaep use PKCS#1 OAEP -sign sign with private key -verify verify with public key -encrypt encrypt with public key -decrypt decrypt with private key -hexdump hex dump output -engine e use engine e, possibly a hardware device. -passin arg pass phrase source
[mtchang@sc220469 key]$ openssl genrsa -out private.pem 1024 Generating RSA private key, 1024 bit long modulus ..++++++ ..........................................++++++ e is 65537 (0x10001)
[mtchang@sc220469 key]$ openssl rsa -in private.pem -out public.pem -outform PEM -pubout writing RSA key
[mtchang@sc220469 key]$ echo 'test to secrets with openssl RSA' > file.txt
[mtchang@sc220469 key]$ openssl rsautl -encrypt -inkey public.pem -pubin -in file.txt -out file.ssl [mtchang@sc220469 key]$ ls -l -rw-r--r-- 1 mtchang users 128 Jan 25 03:52 file.ssl -rw-r--r-- 1 mtchang users 33 Jan 25 03:52 file.txt
[mtchang@sc220469 key]$ openssl rsautl -decrypt -inkey private.pem -in file.ssl -out decrypted.txt [mtchang@sc220469 key]$ cat decrypted.txt test to secrets with openssl RSA
延伸閱讀：http://jangmt.com/wiki/index.php?title=253-ch3
# useradd -g users -m student # echo 'student:linux' | chpasswd
# yum install httpd # service httpd restart * elink http://127.0.0.1
# mv /tmp/tmp.html /var/www/html # mv /home/student/home.html /var/www/html # ls /var/www/html -lZ -rw-r--r-- root root root:object_r:user_home_t home.html -rw-r--r-- root root root:object_r:tmp_t tmp.html
[root@localhost html]# sealert -l 45ff7c2f-1b79-4746-8280-f7ef6fd06d5d (看log有寫怎麼下) Summary: SELinux is preventing the httpd from using potentially mislabeled files (/var/www/html/tmp.html). Detailed Description: SELinux has denied httpd access to potentially mislabeled file(s) (/var/www/html/tmp.html). This means that SELinux will not allow httpd to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Allowing Access: If you want httpd to access this files, you need to relabel them using restorecon -v '/var/www/html/tmp.html'. You might want to relabel the entire directory using restorecon -R -v '/var/www/html'. Additional Information: Source Context root:system_r:httpd_t Target Context root:object_r:tmp_t Target Objects /var/www/html/tmp.html [ file ] Source httpd Source Path /usr/sbin/httpd PortHost localhost.localdomain Source RPM Packages httpd-2.2.3-31.el5 Target RPM Packages Policy RPM selinux-policy-2.4.6-255.el5 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name home_tmp_bad_labels Host Name localhost.localdomain Platform Linux localhost.localdomain 2.6.18-164.el5 #1 SMP Tue Aug 18 15:51:54 EDT 2009 i686 i686 Alert Count 2 First Seen Sat Jan 16 05:28:13 2010 Last Seen Sat Jan 16 05:28:13 2010 Local ID 45ff7c2f-1b79-4746-8280-f7ef6fd06d5d Line Numbers Raw Audit Messages host=localhost.localdomain type=AVC msg=audit(1263590893.105:76): avc: denied { getattr } for pid=4486 comm="httpd" path="/var/www/html/tmp.html" dev=hda5 ino=100522 scontext=root:system_r:httpd_t:s0 tcontext=root:object_r:tmp_t:s0 tclass=file host=localhost.localdomain type=SYSCALL msg=audit(1263590893.105:76): arch=40000003 syscall=196 success=no exit=-13 a0=92c5218 a1=bf9e14cc a2=943ff4 a3=2008171 items=0 ppid=4483 pid=4486 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=2 comm="httpd" exe="/usr /sbin/httpd" subj=root:system_r:httpd_t:s0 key=(null)
# restorecon /var/www/html/home.html 或是 # chcon -u system_u -r object_r -t httpd_sys_content_t /var/www/html/tmp.html 結果 # ls -lZ -rw-r--r-- root root system_u:object_r:httpd_sys_content_t home.html -rw-r--r-- root root system_u:object_r:httpd_sys_content_t tmp.html
/etc/init, 他們是純文字檔案,不需要other