Milister's questions

当 SELinux 被禁用时，我没有任何问题，但是当它被强制执行时，我就面临这个问题

[systemd] failed to get d-bus session: Failed to connect to socket /run/dbus/system_bus_socket: Permission denied

审计日志

 sealert -a /var/log/audit/audit.log
100% done
found 2 alerts in /var/log/audit/audit.log
--------------------------------------------------------------------------------

SELinux is preventing /usr/sbin/zabbix_agentd from connectto access on the unix_stream_socket /run/dbus/system_bus_socket.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that zabbix_agentd should be allowed connectto access on the system_bus_socket unix_stream_socket by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'zabbix_agentd' --raw | audit2allow -M my-zabbixagentd
# semodule -i my-zabbixagentd.pp

我按照上面的建议创建了一个策略，重新启动了 zabbix-agent，现在从 zabbix 代理日志获取

[systemd] failed to get d-bus session: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)



 sealert -a /var/log/audit/audit.log
 39% donetype=AVC msg=audit(1534885076.573:250): avc:  denied  { connectto } for  pid=10654 comm="zabbix_agentd" path="/run/dbus/system_bus_socket" scontext=system_u:system_r:zabbix_agent_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=unix_stream_socket

**** Invalid AVC allowed in current policy ***

文件 st.txt：

"succeeded" "test" "2018-03-30T13:42:12Z" "2018-03-30T13:42:21Z"

我有一个返回最新 Rundeckjob 状态的脚本

curl -s -H "Accept: application/json" -X GET "http://localhost:4440/api/20/project/Windows-AD/executions?authtoken=r50onM4kXzZ7DhhAN6Fe2rwwxuAhF0IG"  | python -m json.tool > 1.json

jq -r '.|[.executions[] | select(.job.name != null)]  | sort_by(.id)  | reverse  | .[0]  | [.status, .job.name, ."date-started".date, ."date-ended".date] | @csv' 1.json > 1.csv

sed 's/,/ /g' 1.csv>st.txt
while read status name startdate enddate; do
case "$status" in
"\"aborted\"")
echo -1
;;
 "\"failed\"")
echo -1 +  $name
;;
 "\"succeeded\"")
echo 0
;;
*) echo 0 + $name
esac
exit 0
done<st.txt

如何比较 $start 和 $enddate (" 2018-03-30T13:42:12Z" "2018-03-30T13:42:21Z")，如果差异大于 5 分钟，则添加另一个退出“花费太长时间”

st.txt

“失败” “aa” “2018-04-03T17:43:38Z”

   while read status name date; do
    case "$status" in
    'aborted')
        echo -1
        ;;
    "failed")
        echo -1
        ;;
    'succeeded')
        echo 0
        ;;
    *)
        echo 0
    esac
    exit 0
done < st.txt

但我总是得到 0 作为输出。

我有这个文件（从 vim 复制）：

name: some name^M
^M
count: 1^M
^M
region: some_region
name: some name^M
^M
count: 2^M
^M
region: some_region^M
^M
name: some name^M
^M
count: 1^M
^M
region: some_region^M
^M

Testing Powershell scripts execustions from Rundeck server against Windows server

如何仅在名称，计数和区域之后获取值

所需的输出：

some name 1 some region
some name 2 some region
some name 1 some region

和 grep -E 'name|count|region' output.txt | sed 's/^.*: //'

我有

some name
1
some_region
some name
2
some_region
some name
1
some_region

如何生成多个列？

我有这个 CSV 文件：

"ADFS-Administrators","Administrator-Access","arn:aws:iam::279052847476:saml-provider/companyADFS"
"ADFS-amtest-ro","arn:aws:iam::279052847476:saml-provider/companyADFS"
"AWSAccCorpAdmin","arn:aws:iam::279052847476:saml-provider/LastPass"
"AWScompanyCorpAdmin","arn:aws:iam::279052847476:saml-provider/LastPass"
"AWScompanyCorpPowerUser","arn:aws:iam::279052847476:saml-provider/LastPass"
"flowlogsRole","oneClick_flowlogsRole_1495032428381",
"companyDevShutdownEC2Instaces","oneClick_lambda_basic_execution_1516271285849",
"companySAMLUser","arn:aws:iam::279052847476:saml-provider/companyAzureAD"
"lambda_stop_rundeck_instance","oneClick_lambda_basic_execution_1519651160794",
"OneLoginAdmin","arn:aws:iam::279052847476:saml-provider/OneLoginAdmin"
"OneLoginDev","arn:aws:iam::279052847476:saml-provider/OneLoginDev"
"vmimport","vmimport",
"workspaces_DefaultRole","SkyLightServiceAccess",

如果在第一个逗号之后有一个以开头的字符串，我想在每一行中添加另一个逗号arn:aws:iam:

所需输出（部分）：

"ADFS-amtest-ro",,"arn:aws:iam::279052847476:saml-provider/companyADFS"
"AWSAccCorpAdmin",,"arn:aws:iam::279052847476:saml-provider/LastPass"
"AWScompanyCorpAdmin",,"arn:aws:iam::279052847476:saml-provider/LastPass"
"AWScompanyCorpPowerUser",,"arn:aws:iam::279052847476:saml-provider/LastPass

对于没有以 开头的字符串的行arn:aws:iam，不要更改任何内容。

1.csv：

rundeck-read-only-iam-permissions,IAMReadOnlyAccess
citrix-xendesktop-ec2-provisioning",AmazonEC2FullAccess

2.csv：

 citrix-xendesktop-ec2-provisioning",AmazonEC2FullAAA
citrix-xendesktop-ec2-provisioning",AmazonS3FullAccess
rundeck-read-only-iam-permissions,IAMReadOnlyAccess
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq,qqqqqqqqqqqqqqqq

注意顺序不一样

我想比较文件 2.csv 与文件 1.csv 中的差异（以及 2.csv 中的订单行以匹配 1.csv 中的订单

如果没有更改打印：如果文件 1.csv 中的行发生更改，则没有更改 print 已更改的行 + 行内容，如果文件 1.csv 中的行丢失 print "已删除的行 + 行内容，如果行添加了文件 1.csv 打印“添加了行”+ 行内容，到目前为止，我有这个，它打印所需的输出，但是否可以检测到添加/删除的内容

      comm -1 -3 <(sort 1.csv) <(sort 2.csv)
citrix-xendesktop-ec2-provisioning",AmazonEC2FullAAA
citrix-xendesktop-ec2-provisioning",AmazonS3FullAccess
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq,qqqqqqqqqqqqqqqq