#!/bin/bash# 耶稣蓝队访问控制与监控脚本# 作者: System Admin Bash Builder# 描述: 该脚本在Linux系统上实施访问控制并监控用户活动，确保安全访问并记录所有操作
LOG_FILE="access_control.log"
# 步骤1: 初始化日志文件echo "访问控制日志 - $(date)" > $LOG_FILEecho "----------------------------------------" >> $LOG_FILE
# 步骤2: 设置用户账户管理echo "[*] 正在设置用户账户管理..." | tee -a $LOG_FILEuseradd -m -s /bin/bash secure_user | tee -a $LOG_FILEecho "secure_user:SecurePass123!" | chpasswd | tee -a $LOG_FILE
# 步骤3: 实施强认证echo "[*] 正在通过SSH密钥认证实现强认证..." | tee -a $LOG_FILEmkdir -p /home/secure_user/.sshssh-keygen -t rsa -b 4096 -f /home/secure_user/.ssh/id_rsa -N '' | tee -a $LOG_FILEcat /home/secure_user/.ssh/id_rsa.pub >> /home/secure_user/.ssh/authorized_keyschmod 600 /home/secure_user/.ssh/authorized_keyschmod 700 /home/secure_user/.sshchown -R secure_user:secure_user /home/secure_user/.ssh | tee -a $LOG_FILE
# 步骤4: 设置访问日志echo "[*] 正在设置访问日志..." | tee -a $LOG_FILEtouch /var/log/auth.logchown syslog:adm /var/log/auth.logchmod 640 /var/log/auth.logecho "auth,authpriv.* /var/log/auth.log" >> /etc/rsyslog.d/50-default.confsystemctl restart rsyslog
# 步骤5: 监控并记录访问尝试echo "[*] 正在监控并记录访问尝试..." | tee -a $LOG_FILEtail -f /var/log/auth.log | tee -a $LOG_FILE &
# 步骤6: 完成访问控制设置echo "----------------------------------------" >> $LOG_FILEecho "[*] 访问控制与监控设置完成。结果已保存至$LOG_FILE。"