well-known file is not secure

执行jstack pid时,提示well-known file is not secure. 原因是pid的启动用户不是当前用户,需要切换到启动用户下执行jstack即可. 可以通过如下命令来处理: sudo -u $user jstack $pid…

file: 查看文件类型 file常见命令参数 Usage: file [OPTION...] [FILE...] Determine type of FILEs. --help display this help and exit -v, --version output version information and exit -m, --magic-file LIST use LIST as a colon-separated list of magic number files -z,…

File System Programming---(三)

Accessing Files and Directories Before you can open a file, you first have to locate it in the file system. The system frameworks provide many routines for obtaining references to many well-known directories, such as the Library directory and its con…

［转载］　构造linux 系统下免密码ｓｓｈ登陆　　＿How to establish password-less login with SSH

In present (post production) IT infrastructure many different workstations, servers etc. have to be maintained on a daily basis. When running on *nix operating systems, the main tool to log into and execute arbitrary code on a remote machine is SSH .…

OpenSSL Command-Line HOWTO

OpenSSL Command-Line HOWTO The openssl application that ships with the OpenSSL libraries can perform a wide range of crypto operations. This HOWTO provides some cookbook-style recipes for using it. Paul Heinlein | November 10, 2015 https://www.madboa…

Enforcing the correct protocol for partially SSL secured SharePoint sites

Enforcing the correct protocol for partially SSL secured SharePoint sites http://www.sharepointconfig.com/2010/03/enforcing-the-correct-protocol-for-partially-ssl-secured-sharepoint-sites/ This is the third in a series of posts detailing how to confi…

fleetctl --help

NAME: fleetctl - fleetctl is a command-line interface to fleet, the cluster-wide CoreOS init system. USAGE: fleetctl [global options] <command> [command options] [arguments...] VERSION: 0.10.2 COMMANDS: cat Output the contents of…

Jsch

JSch is a pure Java implementation of SSH2. JSch allows you to connect to an sshd server and use port forwarding, X11 forwarding, file transfer, etc., and you can integrate its functionality into your own Java programs. JSch is licensed under BSD sty…

Common Linux log files name and usage--reference

reference:http://www.coolcoder.in/2013/12/common-linux-log-files-name-and-usage.html if you spend lot of time in Linux environment, it is essential that you know where the log files are located, and what is contained in each and every log file. When…

How To Add Swap on Ubuntu 14.04

https://www.digitalocean.com/community/tutorials/how-to-add-swap-on-ubuntu-14-04 How To Add Swap on Ubuntu 14.04 PostedApril 28, 2014 597.9kviews GETTING STARTED LINUX BASICS SERVER OPTIMIZATION UBUNTU Introduction One of the easiest way of increas…

限制ssh远程登陆

超过十次,就添加到hosts.deny里面去 #!/bin/bash date=`date +%Y%m%d` file="/var/log/secure" max=10 if [[ -f $file ]] then grep Failed $file | awk '{print $(NF-3)}' | sort -rn | uniq -c | awk '{print $2 "=" $1}'>/shell/ip.txt fi for a in `…

sha1 算法源码

原来指望sha1 这种烂大街的算法不会出什么幺蛾子结果<linux C编程实战Code>bt章节的sha1 代码我在linux和windows下的结果不一样然后用了哈希工具查看了下发现结果也不一样. windows和linux自带工具是一致的,但是和<linux C编程实战Code>的代码无论在windows还是linux下都不一致这里记录下新得代码以后备用 (unbuntu wndows7 下执行计算结果一致) /* * sha1.h * * Descripti…

syslog-ng应用详解

syslog-ng应用详解科技小能手 2017-11-07 02:43:00 浏览136 评论0 日志 LOG 配置主机 syslog source file varchar 摘要: 最近做一个新项目,要做日志集中收集和处理,拿到机器一看,这批机器用的都是SUSE10 SP2系统,日志服务器用的都是syslog-ng.之前写过写过一篇关于rsyslog的博文,目前也用不上了.总不能把这些机器都挨个装一遍rsyslog吧. 最近做一个新项目,要做日志集中收集和处理,拿到机器一看,这批机器用…

K8S学习笔记之Flannel解读

0x00 概述我们知道docker官方并没有提供多主机的容器通信方案,单机网络的模式主要有host,container,brige,none.none这种模式,顾名思义就是docker本身不去管理网络模式,交由其他管理和分配,比如cni.Flannel是一个专为kubernetes定制的三层网络解决方案,主要用于解决容器的跨主机通信问题. 首先,flannel利用Kubernetes API或者etcd用于存储整个集群的网络配置,其中最主要的内容为设置集群的网络地址空间.例如,设定整个集群内所…

android 8.0 intent安装apk失败屏幕闪过

需要做两处设置: 1.android8.0要加一条权限: <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES"/> 2.设置Secure File Sharing: 在Secure File Sharing上打勾,如下图. 遇到Secure File Sharing勾选后,丢失的现象,这个要注意,我遇到后,查了好几个小时才发现,浪费生命!…

JMap与JStack

用JMap和JStack做堆dump和线程dump 命令 1. jmap -dump:format=b,file=filename pidjmap -dump:format=b,file=jmap0225.bin 18646 jmap -histo<:live> pid : 查看当期那 heap 的对象 sudo -u tomcat jmap -histo 1234 | sudo -u tomcat tee /tmp/histo.log jmap --heap pid : 查看 heap 结构…

强化Linux安全的10个技能

1.找出不必要的服务很明显,服务器上跑的服务,并不是每个都有用的.强烈建议检查并关掉不需要的服务,从而减少风险(多跑一个服务,就可能多几个漏洞). 查询运行在runlevel 3的服务列表: [afei@afei ~]# /sbin/chkconfig --list |grep '3:on' 关闭指定的服务: [afei@afei ~]# chkconfig ip6tables off 疑问:为什么查询runlevel 3的服务?Linux系统有7个运行级别(runlevel),分别如下:ru…

metasploitable实践

使用Fimap和metasploitable2文件包含漏洞测试 fimap 首先查看msf已经存在的漏洞: root@kali:~# fimap -u 'http://192.168.136.130/lfi.php?page=index.php' --force-run fimap v.1.00_svn (My life for Aiur) :: Automatic LFI/RFI scanner and exploiter :: by Iman Karim (fimap.dev@gmail.c…

btrace 常见问题

执行btrace命令报错:Unable to open socket file: target process not responding or HotSpot VM not loaded ------------------------------------------------------------------------------------------- -bash-4.1# /apps/svr/jdk7/bin/jstack/jps -l32382 sun.tools.jps…

Oracle Extended Tracing

Definitions A trace file is a file that contains diagnostic data used to investigate problems. Also, trace files can provide guidance for tuning applications or an instance. Types of Trace Files Each server and background process can periodically…

LoadRunner中调用SHA1算法加密字符串

参考<SHA-1 hash for LoadRunner>: http://ptfrontline.wordpress.com/2010/03/02/sha-1-hash-for-loadrunner/ 包含SHA1算法的头文件sha1.h: /* ***************************************************************************** * * March 2010 * * Small changes by Kim Sa…

资深专家深度剖析Kubernetes API Server第2章（共3章）

欢迎来到深入学习Kubernetes API Server的系列文章的第二部分.在上一部分中我们对APIserver总体,相关术语及request请求流进行探讨说明.在本部分文章中,我们主要聚焦于探究如何对Kubernetes 对象的状态以一种可靠,持久的方式进行管理.之前的文章中提到过API Server自身是无状态的,并且它是唯一能够与分布式存储etcd直接通信的组件. etcd的简要说明在*nix操作系统中,我们一般使用/etc来存储相关配置数据.实际上etcd的名字就是由此发展而来,在…

SHA-1算法c语言实现

安全哈希算法(Secure Hash Algorithm)主要适用于数字签名标准 (Digital Signature Standard DSS)里面定义的数字签名算法(Digital Signature Algorithm DSA).对于长度小于2^64位的消息.SHA1会产生一个160位的消息摘要.当接收到消息的时候,这个消息摘要能够用来验证数据的完整性.在传输的过程中.数据非常可能会发生变化,那么这时候就会产生不同的消息摘要. SHA1有例如以下特性:不能够从消息摘要中复原信息:两个不同的…

Linux下cpu过高问题排查

原文地址:https://blog.csdn.net/chenjunan888/article/details/80447800 在服务器报cpu过高时,可使用以下命令,快速导出堆栈信息,以方便查看具体的问题. 1. 使用top命令定位异常进程.可以看见12836的CPU和内存占用率都非常高此时可以再执行ps -ef | grep java,查看所有的java进程,在结果中找到进程号为12836的进程,即可查看是哪个应用占用的该进程. 2. 使用top -H -p 进程号查看异常线程 3. 使…

iOS原生数据存储策略

一 @interface NSCache : NSObject Description A mutable collection you use to temporarily store transient key-value pairs that are subject to eviction when resources are low. Cache objects differ from other mutable collections in a few ways: The NSCach…

Computer system with dual operating modes

A system switches between non-secure and secure modes by making processes, applications, and data for the non-secure mode unavailable to the secure mode and vice versa. The process thread run queue is modified to include a state flag for each process…

线上服务器CPU彪高的调试方式

原文内容来自于LZ(楼主)的印象笔记,如出现排版异常或图片丢失等问题,可查看当前链接:https://app.yinxiang.com/shard/s17/nl/19391737/2fee7b91-fc6e-4e96-838a-b6926b422368 线上服务器CPU彪高的调试方式 1. 使用TOP获取对应的CPU彪高的进程ID 2. top -p 8948 -H 查看8948进程所对应的所有线程,查看引起CPU彪高的线程PID,此处为9037 3. jstack 8948 >/home/xi…