RHCE6.0-文件系统管理

[root@server~]#e2label/dev/my_vg/my-lvlv指定卷标[root@server~]#e2label/dev/my_vg/my-lv查看卷标Lv[root@server~]#mkswap/dev/sda10将分区格式化成swap分区Settingupswapspaceversion1,size=1060252KiBnolabel,UUID=2a122b91-8e1c-4b05-9d99-c267113c0a39[root@server~]#swapon/dev/sda10启用新的swap分区[root@server~]#free-mtotalusedfreesharedbufferscachedMem:998322675035147-/+buffers/cache:139859Swap:503505035[root@server~]#swapoff/dev/sda10关闭指定的swap分区[root@server~]#free-mtotalusedfreesharedbufferscachedMem:998326672036150-/+buffers/cache:139859Swap:399903999想要下次启动生效需要修改/etc/fstab文件让文件系统支持ACL增加test组，增加amy、arthur、ann和austin用户，指定他们同时也隶属于acct组，这些用户不需要密码。创建一个目录/test，指定这个目录的拥有者是amy，拥有组是test，权限是755[root@servertest]#groupaddtest[root@servertest]#foriinamyarthurannaustin;douseradd$i-Gacct;done[root@servertest]#ls/homeamyannarthuraustin[root@servertest]#chownamy/test改变所有者[root@servertest]#chgrptest/test改变所有组[root@servertest]#ls-ld/testdrwxr-xr-x.4amytest4096Aug1014:23/test切换到amy下，用ACL去授予用户arthur和ann对目录/test有rwx权限[root@server~]#su-amy[amy@server~]$setfacl-mu:arthur:rwx/test[amy@server~]$setfacl-mu:ann:rwx/test[amy@server~]$ls-ld/testdrwxrwxr-x+4amytest4096Aug1014:23/test[amy@server~]$getfacl/testgetfacl:Removingleading'/'fromabsolutepathnames#file:test#owner:amy#group:testuser::rwxuser:arthur:rwxuser:ann:rwxgroup::r-xmask::rwxother::r-x切换到arthur、austin和ann用户下，试着在/test这个目录下创建文件，austin这个用户应该会创建失败[root@server~]#su-arthur[arthur@server~]$cd/test[arthur@servertest]$toucharthur[arthur@servertest]$lsarthurlost+found[root@server~]#su-ann[ann@server~]$cd/test[ann@servertest]$touchann[ann@servertest]$lsannarthurlost+found[root@server~]#su-austin[austin@server~]$cd/test[austin@servertest]$touchaustintouch:cannottouch`austin':Permissiondenied切换到amy用户下，创建两个文件cayman和swiss，允许arthur对cayman有写的权限，ann对swiss有写的权限。[root@server~]#su-amy[amy@server~]$touch/test/{cayman,swiss}[amy@server~]$setfacl-mu:arthur:wx/test/cayman[amy@server~]$setfacl-mu:ann:wx/test/swiss[amy@server~]$ls-l/testtotal24-rw-rw-r--.1annann0Aug1014:33ann-rw-rw-r--.1arthurarthur0Aug1014:33arthur-rw-rwxr--+1amyamy0Aug1014:43caymandrwx------.2rootroot16384Aug1014:00lost+found-rw-rwxr--+1amyamy0Aug1014:43swiss[root@server~]#su-arthur[arthur@server~]$echo11>/test/cayman[arthur@server~]$cat/test/caymancat:/test/cayman:Permissiondenied[arthur@server~]$echo11>/test/swiss-bash:/test/swiss:Permissiondenied创建子目录/test/banks，设置ACL，让amy、arthur和ann都有写的权限，austin没有。然后创建文件进行测试。[root@server~]#su-amy[amy@server~]$mkdir/test/banks[amy@server~]$ls-ld/test/banks/drwxrwxr-x.2amyamy4096Aug1014:55/test/banks/[amy@server~]$setfacl-md:u:arthur:rwx/test/banks/[amy@server~]$setfacl-md:u:ann:rwx/test/banks/[amy@server~]$getfacl/test/banks/getfacl:Removingleading'/'fromabsolutepathnames#file:test/banks/#owner:amy#group:amyuser::rwxgroup::rwxother::r-xdefault:user::rwxdefault:user:arthur:rwxdefault:user:ann:rwxdefault:group::rwxdefault:mask::rwxdefault:other::r-x[amy@server~]$echo"amy">/test/banks/deposits[amy@server~]$logout[root@server~]#su-ann[ann@server~]$echo"ann">>/test/banks/deposits[ann@server~]$exitlogout[root@server~]#su-arthur[arthur@server~]$echo"arthur">>/test/banks/deposits[arthur@server~]$exitlogout[root@server~]#su-austin[austin@server~]$echo"austin">>/test/banks/deposits-bash:/test/banks/deposits:Permissiondenied[austin@server~]$logout[root@server~]#cat/test/banks/depositsamyannarthur切换到amy用户下，检查/test/banks/deposits的acl，把deposits这个文件移到/tmp下，再查看acl，再移到/opt下，查看acl，此时发生报错[root@server~]#su-amy[amy@server~]$getfacl/test/banks/depositsgetfacl:Removingleading'/'fromabsolutepathnames#file:test/banks/deposits#owner:amy#group:amyuser::rw-user:arthur:rwx#effective:rw-user:ann:rwx#effective:rw-group::rwx#effective:rw-mask::rw-other::r—[amy@server~]$mv/test/banks/deposits/tmp[amy@server~]$getfacl/tmp/depositsgetfacl:Removingleading'/'fromabsolutepathnames#file:tmp/deposits#owner:amy#group:amyuser::rw-user:arthur:rwx#effective:rw-user:ann:rwx#effective:rw-group::rwx#effective:rw-mask::rw-other::r—[amy@server~]$mv/tmp/deposits/optmv:cannotcreateregularfile`/opt/deposits':Permissiondenied权限问题，进入root用户对/opt赋予777即可解决[root@server~]#chmod777/opt[root@server~]#su-amy[amy@server~]$mv/tmp/deposits/optmv:preservingpermissionsfor`/opt/deposits':Operationnotsupported[amy@serveropt]$getfacldepositsACL丢失#file:deposits#owner:amy#group:amyuser::rw-group::rw-other::r--报错原因如下：由于ACLs是一个挂载选项，如果一个分区在安装的时候被创建，那么这个ACL选项就会在文件系统的超级块里有记录，我们能用tune2fs–l这个命令去浏览这个超级块得信息，安装系统后再分的分区是不支持ACL的[root@server~]#tune2fs-l/dev/sda2|grep"Defaultmount"Defaultmountoptions:user_xattracl[root@server~]#tune2fs-l/dev/sda12|grep"Defaultmount"/dev/sda12就是/optDefaultmountoptions:(none)解决方法：[root@server~]#mount-oremount,acl/opt加上acl选项后重新挂载即可[root@server~]#mount|grepopt/dev/sda12on/opttypeext4(rw,acl)修改/etc/fstab时把default改为acl注意：带有ACL的文件移动到不支持ACL的分区中会导致ACL信息丢失，即使将分区再设置成支持ACL的形式，原来丢失的ACL信息也不会恢复！！磁盘配额[root@server/]#vim/etc/fstab用usrquota替换defaults，重新挂载/opt[root@server/]#quotacheck-mcug/optquotacheck:Cannotcreatenewquotafile/opt/aquota.user.new:Permissiondeniedquotacheck:CannotinitializeIOonnewquotafile:Permissiondenied[root@server/]#setenforce0需要暂时关闭selinux[root@server/]#sestatusSELinuxstatus:enabledSELinuxfsmount:/selinuxCurrentmode:permissiveModefromconfigfile:enforcingPolicyversion:24Policyfromconfigfile:targeted[root@server/]#quotacheck-mcug/opt[root@serveropt]#lsaquota.user[root@station70~]#quotaon/opt为opt打开磁盘配额功能[root@station70~]#useraddfilehog[root@station70~]#edquota–ufilehog编辑磁盘配额文件，设置文件个数Diskquotasforuserfilehog(uid505):Filesystemblockssofthardinodessofthard/dev/sda500010060100[root@station70~]#su–filehog必须使用su–[filehog@station70aaa]$foriin$(seq1100);doecho-n"file$i";touchfile$i2>&1;done|lessfile1file2file3file4file5file6file7file8file9file10file11file12file13file14file15file16file17file18file19file20file21file22file23file24file25file26file27file28file29file30file31file32file33file34file35file36file37file38file39file40file41file42file43file44file45file46file47file48filsda5:warning,userfilequotaexceeded.e49file50file51file52file53file54file55file56file57file58file59file60file61file62file63file64file65file66file67file68file69file70file71file72file73file74file75file76file77file78file79file80file81file82file83file84file85file86file87file88file89file90file91file92file93file94file95filsda5:writefailed,userfilelimitreached.e96file97file98file99file100touch:cannottouch`file100':Diskquotaexceeded部分文件创建失败，因为当创建用户filehog的时候需要从/etc/skel复制一些文件,所以创建100个文件的命令将不会成功[filehog@station70aaa]$quota查看个人磁盘配额信息Diskquotasforuserfilehog(uid505):Filesystemblocksquotalimitgracefilesquotalimitgrace/dev/sda5400100*601006days[root@station70~]#edquota–uzym编辑磁盘配额文件，设置文件大小Diskquotasforuserfilehog(uid505):Filesystemblockssofthardinodessofthard/dev/sda5040005000000[root@station70~]#su–zym[zym@station70opt]$ddif=/dev/zeroof=bigfilebs=1Mcount=4文件大小为4M，无报错信息4+0recordsin4+0recordsout4194304bytes(4.2MB)copied,0.00736558s,569MB/s[zym@station70opt]$lltotal4128-rw-rw-r--.1zymzym4194304Oct2709:40bigfile[zym@station70opt]$rmbigfile[zym@station70opt]$ddif=/dev/zeroof=bigfilebs=1Mcount=5文件大小为5M，有报错信息sda5:warning,userblockquotaexceeded.报错信息sda5:writefailed,userblocklimitreached.报错信息dd:writing`bigfile':Diskquotaexceeded5+0recordsin4+0recordsout5115904bytes(5.1MB)copied,0.0207105s,247MB/s[zym@station70opt]$lltotal5028-rw-rw-r--.1zymzym5115904Oct2709:48bigfile[