Нет доступа с серверу ubuntu 18/04?

Question

[Царёв Вадим]

Помогите советом что делать как восстановить доступ в vps ubuntu 18/04 ? какие должны быть права на папки и файлы lunux cbntv
сначала отвалилась команда sudo
ошибка
----------------------
sudo: unable to stat /etc/sudoers: Permission denied
sudo: no valid sudoers sources found, quitting
sudo: unable to initialize policy plugin

------------------
права
-r--r----- 1 root root 755 Jan 18 2018 sudoers
dr--r----- 2 root root 4096 Jun 5 10:53 sudoers.d
-r--r----- 1 root root 958 Feb 2 2020 /etc/sudoers.d/README
загрузился с LIVE ДИСКА аварийной vps ? как можно восстановить доступ по ssh

Comments

[Ромзес Панагиотис]

Если случайно изменены права на весь корневой раздел (все файлы), то дело гиблое. Нужно тогда восстанавливать с резервной копии (если она есть).

Answer 1

[Fenrir89]

Попробуйте для начала проверить диск на ошибки файловой системы, обычно права просто так не слетают, есть причина, или сами ковыряли?

Comments

[Царёв Вадим]

ковырял

[Fenrir89]

Царёв Вадим, 440 root root, стандартные

[Fenrir89]

Царёв Вадим, примонтируй системный диск в rw режиме, и

chmode -R 0440 /mnt/etc/sudoers/
crown -R root:root /mnt/etc/sudoers/

Mnt путь до точки монтирования системного диска

[AUser0]

Fenrir89, хммм, /mnt/etc/sudoers.d/ будет корректнее.

[Царёв Вадим]

может права на саму папку /mnt/etc/sudoers.d/?
вот вроде все норма)

root@debian-live:~# cd ../mnt
root@debian-live:/mnt# ls -l
total 2097248
drwxr-xr-x 2 root root 4096 Jun 5 10:54 bin
drwxr-xr-x 2 root root 4096 Jun 5 10:50 boot
drwxr-xr-x 4 root root 4096 Jun 5 10:51 dev
drwxr-xr-x 93 root root 4096 Jun 13 14:38 etc
drwxr-xr-x 2 root root 4096 Apr 24 2018 home
lrwxrwxrwx 1 root root 34 Jun 5 10:52 initrd.img -> boot/initrd.img-4.15.0-144-generic
lrwxrwxrwx 1 root root 34 Jun 5 10:52 initrd.img.old -> boot/initrd.img-4.15.0-144-generic
drwxr-xr-x 18 root root 4096 Jun 5 10:54 lib
drwxr-xr-x 2 root root 4096 Jun 5 10:53 lib64
drwx------ 2 root root 16384 Jun 5 10:50 lost+found
drwxr-xr-x 2 root root 4096 Jun 5 10:51 media
drwxr-xr-x 2 root root 4096 Jun 5 10:51 mnt
drwxr-xr-x 2 root root 4096 Jun 5 10:51 opt
drwxr-xr-x 2 root root 4096 Apr 24 2018 proc
drwx------ 5 root root 4096 Jun 11 15:28 root
drwxr-xr-x 2 root root 4096 Jun 5 10:55 run
drwxr-xr-x 2 root root 4096 Jun 5 10:55 sbin
drwxr-xr-x 2 root root 4096 Jun 5 10:51 srv
-rw------- 1 root root 2147483648 Jun 5 10:50 swapfile
drwxr-xr-x 2 root root 4096 Apr 24 2018 sys
drwxrwxrwt 7 root root 4096 Jun 13 14:49 tmp
drwxr-xr-x 10 root root 4096 Jun 5 10:51 usr
drwxr-xr-x 12 root root 4096 Jun 5 10:58 var
lrwxrwxrwx 1 root root 31 Jun 5 10:52 vmlinuz -> boot/vmlinuz-4.15.0-144-generic
lrwxrwxrwx 1 root root 31 Jun 5 10:52 vmlinuz.old -> boot/vmlinuz-4.15.0-144-generic

[Царёв Вадим]

root@debian-live:/mnt/etc# ls -l
total 784
drwxr-xr-x 3 root root 4096 Jun 5 10:54 acpi
-rw-r--r-- 1 root root 3028 Jun 5 10:51 adduser.conf
-rw-r--r-- 1 root root 0 Jun 12 18:26 aliases
-rw-r--r-- 1 root root 12288 Jun 13 06:47 aliases.db
drwxr-xr-x 2 root root 4096 Jun 13 06:47 alternatives
drwxr-xr-x 8 root root 4096 Jun 12 16:40 apache2
drwxr-xr-x 3 root root 4096 Jun 5 10:54 apm
drwxr-xr-x 3 root root 4096 Jun 5 10:54 apparmor
drwxr-xr-x 8 root root 4096 Jun 5 11:00 apparmor.d
drwxr-xr-x 7 root root 4096 Jun 5 10:53 apt
-rw-r--r-- 1 root root 2319 Apr 4 2018 bash.bashrc
-rw-r--r-- 1 root root 45 Apr 2 2018 bash_completion
drwxr-xr-x 2 root root 4096 Jun 5 10:55 bash_completion.d
-rw-r--r-- 1 root root 367 Jan 27 2016 bindresvport.blacklist
drwxr-xr-x 2 root root 4096 Apr 20 2018 binfmt.d
drwxr-xr-x 3 root root 4096 Jun 5 10:51 ca-certificates
-rw-r--r-- 1 root root 6841 Jun 5 10:53 ca-certificates.conf
-rw-r--r-- 1 root root 5898 Jun 5 10:51 ca-certificates.conf.dpkg-old
drwxr-xr-x 2 root root 4096 Jun 5 10:54 calendar
drwxr-xr-x 2 root root 4096 Jun 5 10:53 console-setup
drwxr-xr-x 2 root root 4096 Jun 13 06:47 cron.d
drwxr-xr-x 2 root root 4096 Jun 12 18:26 cron.daily
drwxr-xr-x 2 root root 4096 Jun 5 10:51 cron.hourly
drwxr-xr-x 2 root root 4096 Jun 5 10:51 cron.monthly
-rw-r--r-- 1 root root 722 Nov 16 2017 crontab
drwxr-xr-x 2 root root 4096 Jun 5 10:54 cron.weekly
drwxr-xr-x 2 root root 4096 Jun 5 11:34 dbconfig-common
drwxr-xr-x 4 root root 4096 Jun 5 10:51 dbus-1
-rw-r--r-- 1 root root 2969 Feb 28 2018 debconf.conf
-rw-r--r-- 1 root root 11 Jun 25 2017 debian_version
drwxr-xr-x 2 root root 4096 Jun 5 10:58 default
-rw-r--r-- 1 root root 604 Aug 13 2017 deluser.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:53 depmod.d
drwxr-xr-x 4 root root 4096 Jun 5 10:53 dhcp
drwxr-xr-x 2 root root 4096 Jun 5 10:54 dictionaries-common
drwxr-xr-x 4 root root 4096 Jun 5 10:53 dpkg
drwxr-xr-x 3 root root 4096 Jun 5 10:54 emacs
-rw-r--r-- 1 root root 106 Jun 5 10:53 environment
drwxr-xr-x 4 root root 4096 Jun 5 11:32 fonts
-rw-r--r-- 1 root root 695 Jun 5 10:55 fstab
-rw-r--r-- 1 root root 280 Jun 20 2014 fuse.conf
-rw-r--r-- 1 root root 2584 Feb 1 2018 gai.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:54 groff
-rw-r--r-- 1 root root 706 Jun 13 06:47 group
-rw-r--r-- 1 root root 690 Jun 13 06:47 group-
drwxr-xr-x 2 root root 4096 Jun 5 10:55 grub.d
-rw-r----- 1 root shadow 586 Jun 13 06:47 gshadow
-rw-r----- 1 root shadow 573 Jun 13 06:47 gshadow-
drwxr-xr-x 3 root root 4096 Jun 5 10:54 gss
-rw-r--r-- 1 root root 4861 Feb 22 2018 hdparm.conf
-rw-r--r-- 1 root root 92 Apr 9 2018 host.conf
-rw-r--r-- 1 root root 28 Jun 5 10:55 hostname
-rw-r--r-- 1 root root 221 Jun 5 10:55 hosts
-rw-r--r-- 1 root root 425 Jun 12 18:26 hosts.allow
-rw-r--r-- 1 root root 711 Jun 5 10:54 hosts.deny
drwxr-xr-x 2 root root 4096 Jun 8 14:47 init
drwxr-xr-x 2 root root 4096 Jun 13 06:47 init.d
drwxr-xr-x 5 root root 4096 Jun 5 10:51 initramfs-tools
-rw-r--r-- 1 root root 1748 May 15 2017 inputrc
drwxr-xr-x 2 root root 4096 Jun 13 06:47 insserv.conf.d
drwxr-xr-x 4 root root 4096 Jun 5 10:53 iproute2
-rw-r--r-- 1 root root 26 Aug 13 2020 issue
-rw-r--r-- 1 root root 19 Aug 13 2020 issue.net
drwxr-xr-x 6 root root 4096 Jun 5 10:52 kernel
-rw-r--r-- 1 root root 144 Jun 5 10:55 kernel-img.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:54 ldap
-rw-r--r-- 1 root root 23422 Jun 13 06:47 ld.so.cache
-rw-r--r-- 1 root root 34 Jan 27 2016 ld.so.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:53 ld.so.conf.d
-rw-r--r-- 1 root root 267 Apr 9 2018 legal
drwxr-xr-x 9 root root 4096 Jun 13 13:35 letsencrypt
-rw-r--r-- 1 root root 191 Feb 7 2018 libaudit.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:52 libnl-3
drwxr-xr-x 4 root root 4096 Jun 5 11:32 lighttpd
-rw-r--r-- 1 root root 2995 Apr 16 2018 locale.alias
-rw-r--r-- 1 root root 9395 Jun 5 10:53 locale.gen
lrwxrwxrwx 1 root root 33 Jun 5 10:53 localtime -> /usr/share/zoneinfo/Europe/Berlin
drwxr-xr-x 6 root root 4096 Jun 12 18:26 logcheck
-rw-r--r-- 1 root root 10550 Jan 25 2018 login.defs
-rw-r--r-- 1 root root 703 Aug 21 2017 logrotate.conf
drwxr-xr-x 2 root root 4096 Jun 12 16:37 logrotate.d
-rw-r--r-- 1 root root 105 Aug 13 2020 lsb-release
-rw-r--r-- 1 root root 14867 Oct 13 2016 ltrace.conf
-r--r--r-- 1 root root 33 Jun 5 10:51 machine-id
-rw-r--r-- 1 root root 111 Feb 13 2018 magic
-rw-r--r-- 1 root root 111 Feb 13 2018 magic.mime
drwxr-sr-x 7 Debian-exim 114 4096 Jun 12 18:29 mail
-rw-r--r-- 1 root root 3611 Jun 12 16:37 mailcap
-rw-r--r-- 1 root root 449 Jul 15 2016 mailcap.order
-rw-r--r-- 1 root root 28 Jun 5 10:55 mailname
-rw-r--r-- 1 root root 5174 Aug 4 2018 manpath.config
-rw-r--r-- 1 root root 24301 Jul 15 2016 mime.types
-rw-r--r-- 1 root root 812 Mar 24 2018 mke2fs.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:53 modprobe.d
-rw-r--r-- 1 root root 195 Jun 5 10:51 modules
drwxr-xr-x 2 root root 4096 Jun 5 10:53 modules-load.d
-rw-r--r-- 1 root root 302 Dec 5 2012 motd

[Царёв Вадим]

lrwxrwxrwx 1 root root 19 Jun 5 10:55 mtab -> ../proc/self/mounts
drwxr-xr-x 4 root root 4096 Jun 5 11:00 mysql
-rw-r--r-- 1 root root 9048 Feb 13 2018 nanorc
drwxr-xr-x 2 root root 4096 Jun 5 10:55 netplan
drwxr-xr-x 5 root root 4096 Jun 12 18:26 network
drwxr-xr-x 6 root root 4096 Jun 5 10:53 networkd-dispatcher
-rw-r--r-- 1 root root 81 Jun 5 10:51 networks
drwxr-xr-x 2 root root 4096 Jun 5 10:51 newt
-rw-r--r-- 1 root root 513 Jun 5 10:51 nsswitch.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:51 opt
lrwxrwxrwx 1 root root 21 Aug 13 2020 os-release -> ../usr/lib/os-release
-rw-r--r-- 1 root root 552 Apr 4 2018 pam.conf
drwxr-xr-x 2 root root 4096 Jun 12 18:26 pam.d
-rw-r--r-- 1 root root 1564 Jun 13 06:47 passwd
-rw-r--r-- 1 root root 1564 Jun 13 06:47 passwd-
drwxr-xr-x 4 root root 4096 Jun 5 10:58 perl
drwxr-xr-x 3 root root 4096 Jun 5 11:12 php
drwxr-xr-x 3 root root 4096 Jun 6 18:35 phpmyadmin
drwxr-xr-x 3 root root 4096 Jun 5 10:55 pm
-rw-r--r-- 1 root root 350 Jun 5 10:54 popularity-contest.conf
drwxr-xr-x 5 root root 4096 Jun 13 09:59 postfix
drwxr-xr-x 4 root root 4096 Jun 12 18:26 ppp
-rw-r--r-- 1 root root 581 Apr 9 2018 profile
drwxr-xr-x 2 root root 4096 Jun 5 10:54 profile.d
-rw-r--r-- 1 root root 2932 Dec 26 2016 protocols
drwxr-xr-x 2 root root 4096 Jun 12 16:37 python
drwxr-xr-x 2 root root 4096 Jun 12 16:37 python2.7
drwxr-xr-x 2 root root 4096 Jun 5 10:51 python3
drwxr-xr-x 2 root root 4096 Jun 5 10:53 python3.6
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc0.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc1.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc2.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc3.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc4.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc5.d
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rc6.d
drwxr-xr-x 2 root root 4096 Jun 5 10:54 rcS.d
lrwxrwxrwx 1 root root 39 Jun 5 10:51 resolv.conf -> ../run/systemd/resolve/stub-resolv.conf
drwxr-xr-x 3 root root 4096 Jun 12 18:26 resolvconf
-rwxr-xr-x 1 root root 268 Jul 21 2017 rmt
-rw-r--r-- 1 root root 887 Dec 26 2016 rpc
-rw-r--r-- 1 root root 1358 Jan 30 2018 rsyslog.conf
drwxr-xr-x 2 root root 4096 Jun 13 06:47 rsyslog.d
-rw-r--r-- 1 root root 4141 Jan 25 2018 securetty
drwxr-xr-x 4 root root 4096 Jun 5 10:53 security
drwxr-xr-x 2 root root 4096 Jun 5 10:51 selinux
-rw-r--r-- 1 root root 19183 Dec 26 2016 services
-rw-r----- 1 root shadow 903 Jun 13 14:38 shadow
-rw-r----- 1 root shadow 903 Jun 13 06:47 shadow-
-rw-r--r-- 1 root root 73 Jun 5 10:51 shells
drwxr-xr-x 2 root root 4096 Jun 5 10:53 skel
drwxr-xr-x 2 root root 4096 Jun 5 10:55 ssh
drwxr-xr-x 4 root root 4096 Jun 5 10:53 ssl
-rw-r--r-- 1 root root 0 Jun 5 10:51 subgid
-rw-r--r-- 1 root root 0 Jun 5 10:51 subuid
-r--r----- 1 root root 755 Jan 18 2018 sudoers
dr--r----- 2 root root 4096 Jun 5 10:53 sudoers.d
-rw-r--r-- 1 root root 2736 Jun 5 10:55 sysctl.conf
drwxr-xr-x 2 root root 4096 Jun 5 10:53 sysctl.d
drwxr-xr-x 5 root root 4096 Jun 5 10:53 systemd
drwxr-xr-x 2 root root 4096 Jun 5 10:53 terminfo
-rw-r--r-- 1 root root 14 Jun 5 10:53 timezone
drwxr-xr-x 2 root root 4096 Apr 20 2018 tmpfiles.d
drwxr-xr-x 2 root root 4096 Jun 5 10:54 ubuntu-advantage
-rw-r--r-- 1 root root 1260 Feb 26 2018 ucf.conf
drwxr-xr-x 4 root root 4096 Jun 5 10:52 udev
drwxr-xr-x 3 root root 4096 Jun 5 10:54 ufw
-rw-r--r-- 1 root root 403 Mar 1 2018 updatedb.conf
drwxr-xr-x 3 root root 4096 Jun 5 10:54 update-manager
drwxr-xr-x 2 root root 4096 Jun 12 16:36 update-motd.d
drwxr-xr-x 2 root root 4096 Jun 5 10:53 vim
lrwxrwxrwx 1 root root 23 Jun 5 10:51 vtrgb -> /etc/alternatives/vtrgb
-rw-r--r-- 1 root root 4942 Apr 8 2019 wgetrc
drwxr-xr-x 4 root root 4096 Jun 5 10:54 X11
drwxr-xr-x 4 root root 4096 Jun 5 10:51 xdg
-rw-r--r-- 1 root root 477 Mar 16 2018 zsh_command_not_found

root@debian-live:/mnt/etc# ls -l /mnt/etc/sudoers.d/README
-r--r----- 1 root root 958 Jan 18 2018 /mnt/etc/sudoers.d/README

[Царёв Вадим]

Fenrir89, sudoers это файл а не папка
chmode -R 0440 /mnt/etc/sudoers/
crown -R root:root /mnt/etc/sudoers/