U-35 공유 서비스에 대한 익명 접근 제한 설정

1
2
3
4

# vsFTPd 설정 확인
if [ -f /etc/vsftpd/vsftpd.conf ]; then
    grep "anonymous_enable" /etc/vsftpd/vsftpd.conf
fi

1

anonymous_enable=NO

1

anonymous_enable=YES

1
2
3
4

# Samba 설정 확인
if [ -f /etc/samba/smb.conf ]; then
    grep -E "guest ok|map to guest|public" /etc/samba/smb.conf
fi

1
2
3

map to guest = never
[share]
    guest ok = no

1
2
3

map to guest = bad user
[public]
    guest ok = yes

1
2
3
4

# NFS exports 확인
if [ -f /etc/exports ]; then
    grep -v "^#" /etc/exports | grep -v "^$"
fi

1
2

/export/data 192.168.1.0/24(ro,root_squash,sync)
/backup       192.168.1.10(rw,root_squash,sync)

1

/share *(rw,no_root_squash)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

# /etc/vsftpd/vsftpd.conf 수정
sed -i 's/^anonymous_enable=YES/anonymous_enable=NO/' /etc/vsftpd/vsftpd.conf

# 추가 보안 설정
cat >> /etc/vsftpd/vsftpd.conf << 'EOF'
# 익명 로그인 완전 차단
no_anon_password=YES
anon_root=/dev/null
EOF

systemctl restart vsftpd

1
2
3
4

# /etc/proftpd/proftpd.conf에서 <Anonymous> 섹션 주석 처리
sed -i '/<Anonymous/,/<\/Anonymous>/s/^/#/' /etc/proftpd/proftpd.conf

systemctl restart proftpd

1
2
3
4
5
6
7
8

# /etc/samba/smb.conf 수정
sed -i 's/guest ok = yes/guest ok = no/g' /etc/samba/smb.conf
sed -i 's/public = yes/public = no/g' /etc/samba/smb.conf

# global 섹션에 추가
sed -i '/\[global\]/a guest account = nobody\nmap to guest = never' /etc/samba/smb.conf

systemctl restart smb nmb

1
2
3
4
5
6
7
8
9

# /etc/exports 수정
cat > /etc/exports << 'EOF'
/export/data 192.168.1.0/24(ro,root_squash,sync)
/backup       192.168.1.10(rw,root_squash,sync)
EOF

# 설정 적용
exportfs -ra
systemctl restart nfs-server