{"id":275,"date":"2014-12-20T18:20:51","date_gmt":"2014-12-20T09:20:51","guid":{"rendered":"http:\/\/yokensaka.com\/centos\/?p=275"},"modified":"2017-07-18T22:11:08","modified_gmt":"2017-07-18T13:11:08","slug":"centos7-%e3%82%a4%e3%83%b3%e3%82%b9%e3%83%88%e3%83%bc%e3%83%ab%e5%be%8c%e3%81%ae%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"http:\/\/yokensaka.com\/centos\/?p=275","title":{"rendered":"CentOS 7 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u5f8c\u306e\u8a2d\u5b9a"},"content":{"rendered":"<p>Linux\u306e\u30b3\u30de\u30f3\u30c9\u306f\u300c<a href=\"http:\/\/itpro.nikkeibp.co.jp\/article\/COLUMN\/20060224\/230579\/\" target=\"_blank\">Linux\u30b3\u30de\u30f3\u30c9\u9006\u5f15\u304d\u5927\u5168<\/a>\u300d\u3067\u63a2\u3059\u3053\u3068\u304c\u3067\u304d\u308b\u3002<\/p>\n<p>\u25a0root\u306b\u306a\u308c\u308b\u30e6\u30fc\u30b6\u3092\u5236\u9650<\/p>\n<pre>[root@server1 ~]# usermod -G wheel higo\u3000\u2190\u3000root\u306b\u306a\u308c\u308b\u30e6\u30fc\u30b6\u3092\u7ba1\u7406\u8005\uff08higo\uff09\u306e\u307f\u306b\u3059\u308b\r\n[root@server1 ~]# vi \/etc\/pam.d\/su\r\n#%PAM-1.0\r\nauth sufficient pam_rootok.so\r\n# Uncomment the following line to implicitly trust users in the \"wheel\" group.\r\n#auth sufficient pam_wheel.so trust use_uid\r\n# Uncomment the following line to require a user to be in the \"wheel\" group.\r\nauth required pam_wheel.so use_uid\u3000\u2190\u3000\uff03\u3092\u5916\u3059\r\nauth include system-auth\r\naccount sufficient pam_succeed_if.so uid = 0 use_uid quiet\r\naccount include system-auth\r\npassword include system-auth\r\nsession include system-auth\r\nsession optional pam_xauth.so\r\n\u6b21\u306b\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u5165\u529b\u3057\u3066\/etc\/login.defs \u306e\u6700\u7d42\u884c\u306b SU_WHEEL_ONLY yes \u3092\u8ffd\u52a0\u3002\r\n[root@server1 ~]# echo \"SU_WHEEL_ONLY yes\" &gt;&gt; \/etc\/login.defs<\/pre>\n<p>\u25a0SELinux \u306e\u7121\u52b9\u5316<\/p>\n<pre>[root@server1 ~]# getenforce\r\nEnforcing\r\n[root@server1 ~]# setenforce 0\r\n[root@server1 ~]# getenforce\r\nPermissive\r\n[root@server1 ~]# vi \/etc\/sysconfig\/selinux\r\n\r\n# This file controls the state of SELinux on the system.\r\n# SELINUX= can take one of these three values:\r\n# enforcing - SELinux security policy is enforced.\r\n# permissive - SELinux prints warnings instead of enforcing.\r\n# disabled - No SELinux policy is loaded.\r\nSELINUX=enforcing\r\n\u2193\r\nSELINUX=disabled\u3000\u2190\u3000\u30b7\u30b9\u30c6\u30e0\u8d77\u52d5\u6642\u306bSELinux\u3092\u7121\u52b9\u5316\r\n# SELINUXTYPE= can take one of these two values:\r\n# targeted - Targeted processes are protected,\r\n# minimum - Modification of targeted policy. Only selected processes are protected.\r\n# mls - Multi Level Security protection.\r\nSELINUXTYPE=targeted<\/pre>\n<p>\u25a0\u30d5\u30a1\u30a4\u30a2\u30fc\u30a6\u30a9\u30fc\u30eb\uff08iptables\uff09\u306e\u7121\u52b9\u5316<\/p>\n<pre>[root@server1 ~]# systemctl stop firewalld\r\n[root@server1 ~]# systemctl disable firewalld\r\nrm '\/etc\/systemd\/system\/dbus-org.fedoraproject.FirewallD1.service'\r\nrm '\/etc\/systemd\/system\/basic.target.wants\/firewalld.service'\r\n\r\n\u8a2d\u5b9a\u3092\u6709\u52b9\u306b\u3059\u308b\u70ba\u518d\u8d77\u52d5\r\n[root@server1 ~]# reboot<\/pre>\n<p>\u25a0logwatch\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30b5\u30fc\u30d0\u30fc\u76e3\u8996<\/p>\n<pre>[root@server1 ~]# yum -y install logwatch\r\n\u8aad\u307f\u8fbc\u3093\u3060\u30d7\u30e9\u30b0\u30a4\u30f3:fastestmirror, langpacks, priorities\r\nLoading mirror speeds from cached hostfile\r\n* base: ftp.riken.jp\r\n* centosplus: ftp.riken.jp\r\n* epel: ftp.cuhk.edu.hk\r\n* extras: ftp.riken.jp\r\n* rpmforge: ftp.kddilabs.jp\r\n* updates: ftp.riken.jp\r\n45 packages excluded due to repository priority protections\r\n\u4f9d\u5b58\u6027\u306e\u89e3\u6c7a\u3092\u3057\u3066\u3044\u307e\u3059\r\n--&gt; \u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u3092\u5b9f\u884c\u3057\u3066\u3044\u307e\u3059\u3002\r\n---&gt; \u30d1\u30c3\u30b1\u30fc\u30b8 logwatch.noarch 0:7.4.0-28.20130522svn140.el7 \u3092 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\n--&gt; \u4f9d\u5b58\u6027\u306e\u51e6\u7406\u3092\u3057\u3066\u3044\u307e\u3059: perl(Sys::MemInfo) \u306e\u30d1\u30c3\u30b1\u30fc\u30b8: logwatch-7.4.0-28.20130522svn140.el7.noarch\r\n--&gt; \u4f9d\u5b58\u6027\u306e\u51e6\u7406\u3092\u3057\u3066\u3044\u307e\u3059: perl(Sys::CPU) \u306e\u30d1\u30c3\u30b1\u30fc\u30b8: logwatch-7.4.0-28.20130522svn140.el7.noarch\r\n--&gt; \u4f9d\u5b58\u6027\u306e\u51e6\u7406\u3092\u3057\u3066\u3044\u307e\u3059: perl(Date::Manip) \u306e\u30d1\u30c3\u30b1\u30fc\u30b8: logwatch-7.4.0-28.20130522svn140.el7.noarch\r\n--&gt; \u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u3092\u5b9f\u884c\u3057\u3066\u3044\u307e\u3059\u3002\r\n---&gt; \u30d1\u30c3\u30b1\u30fc\u30b8 perl-Date-Manip.noarch 0:6.41-2.el7 \u3092 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\n---&gt; \u30d1\u30c3\u30b1\u30fc\u30b8 perl-Sys-CPU.x86_64 0:0.54-3.el7 \u3092 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\n---&gt; \u30d1\u30c3\u30b1\u30fc\u30b8 perl-Sys-MemInfo.x86_64 0:0.91-7.el7 \u3092 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\n--&gt; \u4f9d\u5b58\u6027\u89e3\u6c7a\u3092\u7d42\u4e86\u3057\u307e\u3057\u305f\u3002\r\n\r\n\u4f9d\u5b58\u6027\u3092\u89e3\u6c7a\u3057\u307e\u3057\u305f\r\n\r\n====================================================================================================\r\nPackage \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u30fc\r\n\u30d0\u30fc\u30b8\u30e7\u30f3 \u30ea\u30dd\u30b8\u30c8\u30ea\u30fc \u5bb9\u91cf\r\n====================================================================================================\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d:\r\nlogwatch noarch 7.4.0-28.20130522svn140.el7 base 400 k\r\n\u4f9d\u5b58\u6027\u95a2\u9023\u3067\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u3057\u307e\u3059:\r\nperl-Date-Manip noarch 6.41-2.el7 base 1.2 M\r\nperl-Sys-CPU x86_64 0.54-3.el7 base 14 k\r\nperl-Sys-MemInfo x86_64 0.91-7.el7 base 15 k\r\n\r\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u8981\u7d04\r\n====================================================================================================\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb 1 \u30d1\u30c3\u30b1\u30fc\u30b8 (+3 \u500b\u306e\u4f9d\u5b58\u95a2\u4fc2\u306e\u30d1\u30c3\u30b1\u30fc\u30b8)\r\n\r\n\u7dcf\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u5bb9\u91cf: 1.6 M\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u5bb9\u91cf: 14 M\r\nDownloading packages:\r\n(1\/4): perl-Sys-CPU-0.54-3.el7.x86_64.rpm | 14 kB 00:00:00\r\n(2\/4): perl-Sys-MemInfo-0.91-7.el7.x86_64.rpm | 15 kB 00:00:00\r\n(3\/4): logwatch-7.4.0-28.20130522svn140.el7.noarch.rpm | 400 kB 00:00:00\r\n(4\/4): perl-Date-Manip-6.41-2.el7.noarch.rpm | 1.2 MB 00:00:01\r\n----------------------------------------------------------------------------------------------------\r\n\u5408\u8a08 881 kB\/s | 1.6 MB 00:00:01\r\nRunning transaction check\r\nRunning transaction test\r\nTransaction test succeeded\r\nRunning transaction\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d : perl-Sys-CPU-0.54-3.el7.x86_64 1\/4\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d : perl-Date-Manip-6.41-2.el7.noarch 2\/4\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d : perl-Sys-MemInfo-0.91-7.el7.x86_64 3\/4\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d : logwatch-7.4.0-28.20130522svn140.el7.noarch 4\/4\r\n\u691c\u8a3c\u4e2d : logwatch-7.4.0-28.20130522svn140.el7.noarch 1\/4\r\n\u691c\u8a3c\u4e2d : perl-Sys-MemInfo-0.91-7.el7.x86_64 2\/4\r\n\u691c\u8a3c\u4e2d : perl-Date-Manip-6.41-2.el7.noarch 3\/4\r\n\u691c\u8a3c\u4e2d : perl-Sys-CPU-0.54-3.el7.x86_64 4\/4\r\n\r\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb:\r\nlogwatch.noarch 0:7.4.0-28.20130522svn140.el7\r\n\r\n\u4f9d\u5b58\u6027\u95a2\u9023\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3057\u305f:\r\nperl-Date-Manip.noarch 0:6.41-2.el7 perl-Sys-CPU.x86_64 0:0.54-3.el7\r\nperl-Sys-MemInfo.x86_64 0:0.91-7.el7\r\n\r\n\u5b8c\u4e86\u3057\u307e\u3057\u305f!<\/pre>\n<p>logwatch \u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u6bce\u65e51\u56de\u30ed\u30b0\u30ec\u30dd\u30fc\u30c8\u3092\u30e1\u30fc\u30eb\u9001\u4fe1\u3059\u308b\u5b9a\u671f\u5b9f\u884c\u306e cron \u304c\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u3002<\/p>\n<pre>[root@server1 ~]# vi \/etc\/cron.daily\/0logwatch\r\n#!\/bin\/sh\r\n\r\n#Set logwatch location\r\nLOGWATCH_SCRIPT=\"\/usr\/sbin\/logwatch\"\r\n#Add options to this line. Most options should be defined in \/etc\/logwatch\/conf\/logwatch.conf,\r\n#but some are only for the nightly cronrun such as --output mail and should be set here.\r\n#Other options to consider might be \"--format html\" or \"--encode base64\", man logwatch for more details.\r\nOPTIONS=\"--output mail\"\r\n\r\n#Call logwatch\r\n$LOGWATCH_SCRIPT $OPTIONS\r\n\r\nexit 0<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Linux\u306e\u30b3\u30de\u30f3\u30c9\u306f\u300cLinux\u30b3\u30de\u30f3\u30c9\u9006\u5f15\u304d\u5927\u5168\u300d\u3067\u63a2\u3059\u3053\u3068\u304c\u3067\u304d\u308b\u3002 \u25a0r &hellip; <a href=\"http:\/\/yokensaka.com\/centos\/?p=275\">\u7d9a\u304d\u3092\u8aad\u3080 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-275","post","type-post","status-publish","format-standard","hentry","category-4"],"_links":{"self":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=275"}],"version-history":[{"count":7,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/275\/revisions"}],"predecessor-version":[{"id":561,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/275\/revisions\/561"}],"wp:attachment":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}