관리자로서 시스템을 유지관리하다보면 여러사용자의 활동내역등을 확인해보아야할 때가 있습니다.
특히, 웹호스팅서버등과 같은 시스템에서는 가입자들이 시스템의 특정디바이스등을 사용할 때가 있으며, 특히 보안등을 위해서는 특정가입자가 생성한 파일들이 어떤 것이 있나를 확인해야하는 경우들이 있습니다.
이런 경우에 사용하는 간단한 명령어를 소개합니다.
[root@hlxsvr /]# find / -user "sspark" -print
/dev/pts/0
/proc/6894
/proc/6894/cpu
/proc/6894/maps
/proc/6894/statm
/proc/6894/stat
/proc/6894/cmdline
/proc/6894/environ
/proc/6894/fd
/proc/6894/fd/0
/proc/6894/fd/1
/proc/6894/fd/2
/proc/6894/fd/255
/proc/6894/exe
/proc/6894/root
/proc/6894/cwd
/proc/6894/mem
/proc/6894/status
find: /proc/6936/fd/4: No such file or directory
/home/sspark
/home/sspark/.Xdefaults
/home/sspark/.bashrc
/home/sspark/.cshrc
/home/sspark/.emacs
/home/sspark/.gtkrc
/home/sspark/.gvimrc
/home/sspark/.muttrc
/home/sspark/.profile
/home/sspark/.vimrc
/home/sspark/tmp
/home/sspark/.bash_history
/home/sspark/BACKUP
/home/sspark/BACKUP/0820
/home/sspark/BACKUP/0820/project2001.zip
/home/sspark/BACKUP/0820/Office.zip
/home/sspark/BACKUP/0820/Outlook Express.zip
/home/sspark/BACKUP/0827
/home/sspark/BACKUP/0827/sajik.com.tar.gz
/home/sspark/BACKUP/0827/project2001.zip
/home/sspark/BACKUP/0827/Office.zip
/home/sspark/BACKUP/0827/OutlookExpress.zip
/home/sspark/BACKUP/0918
/home/sspark/BACKUP/0918/project2001.zip
/home/sspark/BACKUP/0918/Outlook Express.zip
/home/sspark/BACKUP/0930
/home/sspark/BACKUP/0930/OutlookExpress.zip
/home/sspark/BACKUP/0930/project2001.zip
/home/sspark/BACKUP/0801
/home/sspark/BACKUP/0801/업무자료실.zip
/home/sspark/BACKUP/0801/project2001.zip
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_BBS.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_BOARD.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PBS.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_MEMBER.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PUBLIC.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PUBLIC_HTML.tar.gz
/home/sspark/BACKUP/1010
/home/sspark/BACKUP/1010/OutlookExpress.zip
/home/sspark/BACKUP/1010/project2001.zip
/home/sspark/BACKUP/apache.tar.gz
/home/sspark/BACKUP/aw.tar.gz
/home/sspark/BACKUP/etc.tar.gz
/home/sspark/BACKUP/hanlimmedia.co.kr.tar.gz
/home/sspark/BACKUP/imt-2000.co.kr.tar.gz
/home/sspark/BACKUP/nicekorea.co.kr.tar.gz
/home/sspark/BACKUP/owner.co.kr.tar.gz
/home/sspark/BACKUP/sajik.com.tar.gz
/home/sspark/BACKUP/var.tar.gz
/home/sspark/BACKUP/GUESTBOOK.sql
/home/sspark/BACKUP/customdb.sql
/home/sspark/BACKUP/mysql.sql
/home/sspark/BACKUP/niceboard.sql
/home/sspark/BACKUP/nicepds.sql
/home/sspark/qpopper3.0.2.tar.gz
/home/sspark/accesswatch-2.1.tar.gz
/home/sspark/bind-8.2.1-7.i386.rpm
/home/sspark/bind-devel-8.2.1-7.i386.rpm
/home/sspark/bind-utils-8.2.1-7.i386.rpm
/home/sspark/httpd.conf.20000822
/home/sspark/imsi
/home/sspark/www_log
/home/sspark/idled-1.16.tar.gz
/home/sspark/nc-1.10-4.i386.rpm
/home/sspark/shop.tar.gz
/home/sspark/mysql
/home/sspark/mysql/mysql-3.22.26a-pc-linux-gnu-i686.tar.gz
/home/sspark/mysql/MySQL-3.22.32-1.i386.rpm
/home/sspark/mysql/MySQL-client-3.22.32-1.i386.rpm
/home/sspark/mysql/MySQL-devel-3.22.32-1.i386.rpm
/home/sspark/crack5.0.tar.gz
/home/sspark/mailx-8.1.1-9.i386.rpm
/home/sspark/apache_1.3.12.tar.gz
/home/sspark/.viminfo
/home/sspark/nmap
/home/sspark/nmap/nmap-2.12.tgz
/home/sspark/tripwire
/home/sspark/tripwire/tripwire-1.30-1.tgz
/home/sspark/saint
/home/sspark/saint/saint-1.3.4.tar.gz
/home/sspark/php-4.0.1pl2.tar.gz
/home/sspark/php-3.0.16.tar.gz
/home/sspark/passwd
/home/sspark/cops
/home/sspark/cops/cops_104.tar.gz
/home/sspark/gd1_5.tar.gz
/home/sspark/test
/home/sspark/test2
/home/sspark/test3
/home/sspark/mysql-3.22.24.tar.gz
/home/sspark/freetype-1.2.tar.gz
/home/sspark/php-3.0.12.tar.gz
/home/sspark/elm-2.5.1-1.i386.rpm
/home/sspark/metamail-2.7-22.i386.rpm
/home/sspark/mailcap-2.0.3-1.noarch.rpm
/home/sspark/html.tar
/home/sspark/mrtg-2.9.0pre29.tar.gz
/home/sspark/zlib.tar.gz
/home/sspark/libpng-1.0.8.tar.gz
/home/sspark/mrtg.tar.gz
find: /mnt/cdrom: Input/output error
find: /mnt/floppy: Input/output error
[root@hlxsvr /]#
특히, 웹호스팅서버등과 같은 시스템에서는 가입자들이 시스템의 특정디바이스등을 사용할 때가 있으며, 특히 보안등을 위해서는 특정가입자가 생성한 파일들이 어떤 것이 있나를 확인해야하는 경우들이 있습니다.
이런 경우에 사용하는 간단한 명령어를 소개합니다.
[root@hlxsvr /]# find / -user "sspark" -print
/dev/pts/0
/proc/6894
/proc/6894/cpu
/proc/6894/maps
/proc/6894/statm
/proc/6894/stat
/proc/6894/cmdline
/proc/6894/environ
/proc/6894/fd
/proc/6894/fd/0
/proc/6894/fd/1
/proc/6894/fd/2
/proc/6894/fd/255
/proc/6894/exe
/proc/6894/root
/proc/6894/cwd
/proc/6894/mem
/proc/6894/status
find: /proc/6936/fd/4: No such file or directory
/home/sspark
/home/sspark/.Xdefaults
/home/sspark/.bashrc
/home/sspark/.cshrc
/home/sspark/.emacs
/home/sspark/.gtkrc
/home/sspark/.gvimrc
/home/sspark/.muttrc
/home/sspark/.profile
/home/sspark/.vimrc
/home/sspark/tmp
/home/sspark/.bash_history
/home/sspark/BACKUP
/home/sspark/BACKUP/0820
/home/sspark/BACKUP/0820/project2001.zip
/home/sspark/BACKUP/0820/Office.zip
/home/sspark/BACKUP/0820/Outlook Express.zip
/home/sspark/BACKUP/0827
/home/sspark/BACKUP/0827/sajik.com.tar.gz
/home/sspark/BACKUP/0827/project2001.zip
/home/sspark/BACKUP/0827/Office.zip
/home/sspark/BACKUP/0827/OutlookExpress.zip
/home/sspark/BACKUP/0918
/home/sspark/BACKUP/0918/project2001.zip
/home/sspark/BACKUP/0918/Outlook Express.zip
/home/sspark/BACKUP/0930
/home/sspark/BACKUP/0930/OutlookExpress.zip
/home/sspark/BACKUP/0930/project2001.zip
/home/sspark/BACKUP/0801
/home/sspark/BACKUP/0801/업무자료실.zip
/home/sspark/BACKUP/0801/project2001.zip
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_BBS.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_BOARD.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PBS.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_MEMBER.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PUBLIC.tar.gz
/home/sspark/BACKUP/SUPERUSER_BACKUP_DATA/superuser_PUBLIC_HTML.tar.gz
/home/sspark/BACKUP/1010
/home/sspark/BACKUP/1010/OutlookExpress.zip
/home/sspark/BACKUP/1010/project2001.zip
/home/sspark/BACKUP/apache.tar.gz
/home/sspark/BACKUP/aw.tar.gz
/home/sspark/BACKUP/etc.tar.gz
/home/sspark/BACKUP/hanlimmedia.co.kr.tar.gz
/home/sspark/BACKUP/imt-2000.co.kr.tar.gz
/home/sspark/BACKUP/nicekorea.co.kr.tar.gz
/home/sspark/BACKUP/owner.co.kr.tar.gz
/home/sspark/BACKUP/sajik.com.tar.gz
/home/sspark/BACKUP/var.tar.gz
/home/sspark/BACKUP/GUESTBOOK.sql
/home/sspark/BACKUP/customdb.sql
/home/sspark/BACKUP/mysql.sql
/home/sspark/BACKUP/niceboard.sql
/home/sspark/BACKUP/nicepds.sql
/home/sspark/qpopper3.0.2.tar.gz
/home/sspark/accesswatch-2.1.tar.gz
/home/sspark/bind-8.2.1-7.i386.rpm
/home/sspark/bind-devel-8.2.1-7.i386.rpm
/home/sspark/bind-utils-8.2.1-7.i386.rpm
/home/sspark/httpd.conf.20000822
/home/sspark/imsi
/home/sspark/www_log
/home/sspark/idled-1.16.tar.gz
/home/sspark/nc-1.10-4.i386.rpm
/home/sspark/shop.tar.gz
/home/sspark/mysql
/home/sspark/mysql/mysql-3.22.26a-pc-linux-gnu-i686.tar.gz
/home/sspark/mysql/MySQL-3.22.32-1.i386.rpm
/home/sspark/mysql/MySQL-client-3.22.32-1.i386.rpm
/home/sspark/mysql/MySQL-devel-3.22.32-1.i386.rpm
/home/sspark/crack5.0.tar.gz
/home/sspark/mailx-8.1.1-9.i386.rpm
/home/sspark/apache_1.3.12.tar.gz
/home/sspark/.viminfo
/home/sspark/nmap
/home/sspark/nmap/nmap-2.12.tgz
/home/sspark/tripwire
/home/sspark/tripwire/tripwire-1.30-1.tgz
/home/sspark/saint
/home/sspark/saint/saint-1.3.4.tar.gz
/home/sspark/php-4.0.1pl2.tar.gz
/home/sspark/php-3.0.16.tar.gz
/home/sspark/passwd
/home/sspark/cops
/home/sspark/cops/cops_104.tar.gz
/home/sspark/gd1_5.tar.gz
/home/sspark/test
/home/sspark/test2
/home/sspark/test3
/home/sspark/mysql-3.22.24.tar.gz
/home/sspark/freetype-1.2.tar.gz
/home/sspark/php-3.0.12.tar.gz
/home/sspark/elm-2.5.1-1.i386.rpm
/home/sspark/metamail-2.7-22.i386.rpm
/home/sspark/mailcap-2.0.3-1.noarch.rpm
/home/sspark/html.tar
/home/sspark/mrtg-2.9.0pre29.tar.gz
/home/sspark/zlib.tar.gz
/home/sspark/libpng-1.0.8.tar.gz
/home/sspark/mrtg.tar.gz
find: /mnt/cdrom: Input/output error
find: /mnt/floppy: Input/output error
[root@hlxsvr /]#