FreeBSD权威指南：第2版

需积分: 9 80 浏览量更新于2024-07-18 收藏 6.95MB PDF 举报

" Absolute FreeBSD, 2nd Edition 是一本由 Michael W. Lucas 撰写的关于 FreeBSD 操作系统的全面指南，由 No Starch Press 出版社于2009年8月发布，共736页。这本书是针对 FreeBSD 的第二版，提供了深入的教程和参考资料，适合 BSD 新手和经验丰富的用户。" 在《Absolute FreeBSD, 2nd Edition》中，作者 Michael W. Lucas 详尽地介绍了 FreeBSD 的各个方面，帮助读者理解并充分利用这个开源操作系统的力量。FreeBSD 是一个基于 Berkeley Software Distribution (BSD) 的操作系统，它以其稳定性、安全性及强大的网络功能而闻名。本书涵盖的知识点包括但不限于： 1. **FreeBSD 基础**：介绍 FreeBSD 的历史、哲学和社区，以及如何获取和安装 FreeBSD 系统。 2. **硬件兼容性**：讨论支持的硬件平台和配置，包括如何选择和设置适合运行 FreeBSD 的硬件。 3. **系统管理**：详细讲解配置和管理 FreeBSD 系统，如磁盘分区、文件系统管理、网络设置和用户账户管理。 4. **软件包与 ports**：介绍 FreeBSD 的软件包管理系统，如何使用预编译的软件包以及如何通过 ports 来编译源代码安装软件。 5. **安全性**：深入探讨 FreeBSD 的安全特性，如权限管理、防火墙设置、安全策略和加密技术。 6. **性能优化**：讨论如何调整和优化 FreeBSD 系统以获得最佳性能，包括内存管理、进程调度和 I/O 调整。 7. **服务配置**：提供配置和管理常见服务器服务的指南，如 HTTP、FTP、DNS 和邮件服务器。 8. **故障排查**：介绍诊断和解决问题的技巧，包括日志分析、调试工具和性能监控。 9. **高级话题**：涉及虚拟化技术（如 jails 和 bhyve）、集群技术以及 ZFS 文件系统的使用。 10. **开发环境**：对于希望在 FreeBSD 上进行开发的读者，书中会讲解如何搭建和使用开发环境，包括编译工具链和版本控制系统。书中的内容旨在让新手能够快速上手，同时对经验丰富的 BSD 用户也有所启发，通过清晰易懂的写作风格和实例，使读者能深入了解 FreeBSD 的强大功能和灵活性。无论你是服务器管理员还是开发者，这都是一本不可多得的参考书。

xiv Contents in Detail

Disaffected Users .................................................................................... 179

Motivated Skilled Attackers ...................................................................... 179

FreeBSD Security Announcements ........................................................................... 180

User Security ....................................................................................................... 181

Creating User Accounts ........................................................................... 181

Editing Users: passwd(1), chpass(1), and Friends ........................................ 183

Shells and /etc/shells ........................................................................................... 188

root, Groups, and Management ............................................................................. 189

The root Password ................................................................................... 189

Groups of Users ...................................................................................... 190

Using Groups to Avoid Root ..................................................................... 191

Tweaking User Security ......................................................................................... 195

Restricting Login Ability ............................................................................ 195

Restricting System Usage .......................................................................... 197

File Flags ............................................................................................................ 201

Setting and Viewing File Flags .................................................................. 203

Securelevels ......................................................................................................... 204

Securelevel Definitions ............................................................................. 204

Which Securelevel Do You Need? ............................................................ 205

What Won’t Securelevels and File Flags Accomplish? ................................. 206

Living with Securelevels ............................................................................ 206

Network Targets .................................................................................................. 207

Putting It All Together ............................................................................................ 208

DISKS AND FILESYSTEMS 209

Disk Drives 101 ................................................................................................... 209

Device Nodes ...................................................................................................... 210

Hard Disks and Partitions ......................................................................... 211

The Filesystem Table: /etc/fstab ............................................................................. 212

What’s Mounted Now? ........................................................................................ 214

Mounting and Unmounting Disks ............................................................................ 214

Mounting Standard Filesystems ................................................................. 214

Mounting at Nonstandard Locations .......................................................... 215

Unmounting a Partition ............................................................................ 215

How Full Is a Partition? ......................................................................................... 215

The Fast File System .............................................................................................. 217

Vnodes .................................................................................................. 218

FFS Mount Types ..................................................................................... 218

FFS Mount Options .................................................................................. 220

Soft Updates and Journaling with FFS ........................................................ 220

Write Caching ........................................................................................ 221

Snapshots .............................................................................................. 222

Dirty Disks .............................................................................................. 222

Forcing Read-Write Mounts on Dirty Disks .................................................. 224

FFS Syncer at Shutdown ........................................................................... 224

Background fsck, fsck -y, Foreground fsck, Oy Vey! ..................................... 225

Using Foreign Filesystems ...................................................................................... 225

Supported Foreign Filesystems .................................................................. 226

Permissions and Foreign Filesystems .......................................................... 228

Contents in Detail xv

Removable-Media Filesystems ................................................................................ 228

Formatting FAT32 Media ......................................................................... 228

Using Removable Media .......................................................................... 230

Ejecting Removable Media ....................................................................... 231

Removable Media and /etc/fstab ............................................................. 231

Other FreeBSD Filesystems .................................................................................... 231

Memory Filesystems ................................................................................. 232

Mounting Disk Images ............................................................................. 235

Filesystems in Files ................................................................................... 235

Miscellaneous Filesystems ......................................................................... 238

Wiring Down Devices ........................................................................................... 238

Adding New Hard Disks ....................................................................................... 240

Creating Slices ....................................................................................... 240

Creating Partitions ................................................................................... 241

Configuring /etc/fstab ............................................................................. 241

Installing Existing Files onto New Disks ...................................................... 241

Stackable Mounts .................................................................................... 242

Network Filesystems ............................................................................................. 243

FreeBSD and CIFS ................................................................................................ 248

Prerequisites ........................................................................................... 248

Kernel Support ........................................................................................ 249

Configuring CIFS .................................................................................... 249

nsmb.conf Keywords ............................................................................... 249

CIFS Name Resolution ............................................................................. 250

Other smbutil(1) Functions ........................................................................ 250

Mounting a Share ................................................................................... 251

Other mount_smbfs Options ..................................................................... 251

Sample nsmb.conf Entries ......................................................................... 252

CIFS File Ownership ................................................................................ 252

Serving CIFS Shares ............................................................................................. 252

devfs .................................................................................................................. 253

devfs at Boot: devfs.conf .......................................................................... 253

Global devfs Rules ................................................................................... 255

Dynamic Device Management with devd(8) ................................................ 256

ADVANCED SECURITY FEATURES 261

Unprivileged Users ............................................................................................... 261

The nobody Account ................................................................................ 263

A Sample Unprivileged User ..................................................................... 263

Network Traffic Control ......................................................................................... 263

Default Accept vs. Default Deny ............................................................................. 264

TCP Wrappers ..................................................................................................... 265

Configuring Wrappers ............................................................................. 265

Wrapping Up Wrappers .......................................................................... 271

Packet Filtering .................................................................................................... 272

Enabling PF ............................................................................................ 273

Default Accept and Default Deny in Packet Filtering ..................................... 273

Basic Packet Filtering and Stateful Inspection .............................................. 274

Configuring PF ........................................................................................ 275

Complete PF Rule Sample ......................................................................... 278

Activating PF Rules .................................................................................. 279

xvi Contents in Detail

Public Key Encryption ........................................................................................... 280

Configuring OpenSSL .............................................................................. 281

Certificates ............................................................................................. 282

SSL Trick: Connecting to SSL-Protected Ports ................................................ 285

Jails .................................................................................................................... 286

Jail Host Server Setup .............................................................................. 287

Jail and the Kernel ................................................................................... 289

Client Setup ............................................................................................ 290

Decorating Your Cell: In-Jail Setup ............................................................. 291

Jail and /etc/rc.conf ............................................................................... 293

Jail Startup and Shutdown ........................................................................ 293

Managing Jails ....................................................................................... 294

Jail Shutdown ......................................................................................... 295

What’s Wrong with Jails .......................................................................... 295

Preparing for Intrusions with mtree(1) ...................................................................... 296

Running mtree(1) ..................................................................................... 297

Saving the Spec File ................................................................................ 298

Reacting to an Intrusion ............................................................................ 299

Monitoring System Security ................................................................................... 299

If You’re Hacked .................................................................................................. 300

EXPLORING /ETC 301

/etc Across Unix Species ...................................................................................... 302

/etc/adduser.conf ................................................................................................ 302

/etc/amd.map .................................................................................................... 302

/etc/bluetooth, /etc/bluetooth.device.conf, and

/etc/defaults/bluetooth.device.conf ................................................................. 302

/etc/crontab ....................................................................................................... 302

/etc/csh.* .......................................................................................................... 303

/etc/devd.conf .................................................................................................... 303

/etc/devfs.conf, /etc/devfs.rules, and

/etc/defaults/devfs.rules ................................................................................ 303

/etc/dhclient.conf ................................................................................................ 303

/etc/disktab ........................................................................................................ 303

/etc/freebsd-update.conf ...................................................................................... 304

/etc/fstab ........................................................................................................... 304

/etc/ftp.* ........................................................................................................... 304

/etc/group .......................................................................................................... 304

/etc/hosts ........................................................................................................... 304

/etc/hosts.allow .................................................................................................. 304

/etc/hosts.equiv .................................................................................................. 304

/etc/hosts.lpd ...................................................................................................... 305

/etc/inetd.conf .................................................................................................... 305

/etc/localtime ..................................................................................................... 305

/etc/locate.rc ...................................................................................................... 305

/etc/login.* ........................................................................................................ 306

/etc/mail/mailer.conf .......................................................................................... 306

Contents in Detail xvii

/etc/make.conf ................................................................................................... 306

CFLAGS ................................................................................................. 307

COPTFLAGS ........................................................................................... 307

CXXFLAGS ............................................................................................. 307

CPUTYPE=i686 ....................................................................................... 307

INSTALL=install -C ................................................................................... 308

/etc/master.passwd ............................................................................................. 308

/etc/motd ........................................................................................................... 308

/etc/mtree .......................................................................................................... 308

/etc/namedb ...................................................................................................... 309

/etc/netstart ........................................................................................................ 309

/etc/network.subr ................................................................................................ 309

/etc/newsyslog.conf ............................................................................................ 309

/etc/nscd.conf ..................................................................................................... 309

/etc/nsmb.conf .................................................................................................... 309

/etc/nsswitch.conf ............................................................................................... 309

/etc/opie* .......................................................................................................... 309

/etc/pam.d/* ..................................................................................................... 310

/etc/pccard_ether ................................................................................................ 310

/etc/periodic.conf and /etc/defaults/periodic.conf ................................................. 310

daily_output=”root” ................................................................................. 310

daily_show_success=”YES” ...................................................................... 310

daily_show_info=”YES” ........................................................................... 310

daily_show_badconfig=”NO” .................................................................. 311

daily_local=”/etc/daily.local” .................................................................. 311

/etc/pf.conf ........................................................................................................ 311

/etc/pf.os ........................................................................................................... 311

/etc/phones ........................................................................................................ 311

/etc/portsnap.conf ............................................................................................... 311

/etc/ppp ............................................................................................................ 311

/etc/printcap ...................................................................................................... 312

/etc/profile ......................................................................................................... 312

/etc/protocols ..................................................................................................... 312

/etc/rc* ............................................................................................................. 312

/etc/remote ........................................................................................................ 312

/etc/rpc ............................................................................................................. 313

/etc/security/ ...................................................................................................... 313

/etc/services ....................................................................................................... 313

/etc/shells .......................................................................................................... 313

/etc/snmpd.config ............................................................................................... 313

/etc/src.conf ....................................................................................................... 313

/etc/sysctl.conf .................................................................................................... 313

/etc/syslog.conf .................................................................................................. 313

/etc/termcap ....................................................................................................... 314

/etc/ttys ............................................................................................................. 314

MAKING YOUR SYSTEM USEFUL 315

Making Software ................................................................................................. 316

Source Code and Software ................................................................................... 316

xviii Contents in Detail

The Ports and Packages System .............................................................................. 317

Ports ...................................................................................................... 318

Finding Software .................................................................................................. 320

Finding by Name .................................................................................... 321

Finding by Keyword ................................................................................ 321

Legal Restrictions ..................................................................................... 322

Using Packages ................................................................................................... 322

CD Packages .......................................................................................... 323

FTP Packages .......................................................................................... 324

Installing Packages .................................................................................. 325

pkg_add(1) Environment Settings .............................................................. 326

What Does a Package Install? .................................................................. 327

Uninstalling Packages .............................................................................. 328

Package Information ................................................................................ 329

Package Problems ................................................................................... 330

Using Ports .......................................................................................................... 331

Installing a Port ....................................................................................... 332

Integrated Port Customizations .................................................................. 334

Port Makefiles ......................................................................................... 336

Uninstalling and Reinstalling ..................................................................... 337

Tracking Port Build Status ......................................................................... 338

Cleaning Up Ports ................................................................................... 338

Building Packages ................................................................................... 339

Changing the Install Path .......................................................................... 339

Setting make Options Permanently ............................................................ 340

Ports and Package Security ................................................................................... 340

ADVANCED SOFTWARE MANAGEMENT 343

Using Multiple Processors: SMP ............................................................................. 344

Kernel Assumptions ................................................................................. 344

SMP: The First Try .................................................................................... 345

Today’s SMP .......................................................................................... 346

Processors and SMP ................................................................................ 347

Using SMP ............................................................................................. 348

Schedulers ........................................................................................................... 349

Startup and Shutdown Scripts ................................................................................ 350

rc Script Ordering ................................................................................... 350

A Typical rc Script ................................................................................... 351

Special rc Script Providers ........................................................................ 352

Using Scripts to Manage Running Programs ............................................... 353

Vendor Startup/Shutdown Scripts .............................................................. 353

Debugging Custom rc Scripts .................................................................... 353

Managing Shared Libraries ................................................................................... 354

Shared Library Versions and Files .............................................................. 354

Attaching Shared Libraries to Programs ...................................................... 355

LD_LIBRARY_PATH ................................................................................... 357

What a Program Wants ........................................................................... 358

Threads, Threads, and More Threads ..................................................................... 358

Userland Threading Libraries ................................................................................. 359

Remapping Shared Libraries .................................................................................. 360

www.allitebooks.com

剩余744页未读，继续阅读

weixin_39594025

粉丝: 0
资源: 16

FreeBSD权威指南：第2版

No.Starch.Absolute.OpenBSD.2nd.Edition.Apr.2013

freebsd docker 性能如何

Freebsd使用在哪

guestmount挂载freebsd系统

是什么Network FreeBSD?

freebsd操作系统设计与实现 pdf

docker freebsd

FreeBSD是什么？

ubuntu上怎么启动freebsd的容器

最新资源