Learn, Unlearn and Relearn

1. WASID(변경할관리자ID), WASPW(변경할관리자비밀번호) 를 정하여 아래 스크립트 실행합니다.(아래는 wasadmin/nimdasaw로 설정 예시)WASID=wasadminWASPW=nimdasawWASPWENC=`encryption aes $WASPW | head -n 1 | awk -F'[][]' '{print substr($4, 8)}' | awk '{print substr($0, 1, length($0)-1)}'`echo "AES" > $JEUS_HOME/bin/jeusEncodeecho $WASID >> $JEUS_HOME/bin/jeusEncodeecho $WASPWENC >> $JEUS_HOME/bin/jeusEncodechmod 640 $JEUS_HOME/bin/jeusEncod..

#1. pwquality 점검 mv /etc/security/pwquality.conf /etc/security/pwquality_old.conf echo -e "minlen = 8\ndcredit = -1\nucredit = -1\nlcredit = -1\nocredit = -1\n" | cat - /etc/security/pwquality_old.conf > /etc/security/pwquality.conf rm -f /etc/security/pwquality_old.conf #2. 계정 잠금 설정 centos 7 sed -i '/auth\s\+required\s\+pam_env.so/a auth        required      pam_faillock.so preauth silent audit..

#1. pwquality 점검 mv /etc/security/pwquality.conf /etc/security/pwquality_old.conf echo -e "minlen = 8\ndcredit = -1\nucredit = -1\nlcredit = -1\nocredit = -1\n" | cat - /etc/security/pwquality_old.conf > /etc/security/pwquality.conf rm /etc/security/pwquality_old.conf #2. faillock 설정 (10번 이상 로그인 실패시 10분간 차단)authselect select sssd --force authselect enable-feature with-faillock sed -i "/# deny = ..