Hack The Sec-Leading Resource Of Linux Tutorial: disk

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title" style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-stretch: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<u><i><span style="color: red; font-size: large;">User and Group Disk Quota on CentOS 7 & RHEL 7</span></i></u></h1>
<div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
As a Linux system admin we generally face low disk space issues. By implementing the user and group disk quota on the file system we can resolve the space issue.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLiIUcIRYM9FGu4bkiR30d3x17PGr4K1UBgBqCmdd5nj27lng7N3mjbOcz2xIM9d0tTTCzKGMHQ9TJpl28D-7FYhM1N6Zp_-chCHUbdDOYw2uVugpAJDmn4VDDxfwCXlvaDgI_xPacmP2w/s1600/disk_quota_www.hackthesec.co.in.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLiIUcIRYM9FGu4bkiR30d3x17PGr4K1UBgBqCmdd5nj27lng7N3mjbOcz2xIM9d0tTTCzKGMHQ9TJpl28D-7FYhM1N6Zp_-chCHUbdDOYw2uVugpAJDmn4VDDxfwCXlvaDgI_xPacmP2w/s200/disk_quota_www.hackthesec.co.in.jpg" width="200" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Quota restricts the users to use only allowed disk and inodes on the particular file system. In this post we will discuss how to enable user & group disk quota on /home File system on <a href="http://www.hackthesec.co.in/search/label/centos7" target="_blank">CentOS 7</a> & <a href="http://www.hackthesec.co.in/search/label/Rhel7" target="_blank">RHEL 7</a></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:1 Add usrquota & grpquota option on /home in /etc/fstab file.</h5>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# vi /etc/</span><span style="color: lime;">fstab</span></span></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxzKXTJt-U8tGDhFFVbNVLPD14J5cNoK7_UQI9Ez0v9UwnVLWo7JN0XyYiI8qPfeZfG5stO_irf99QIEskJPSWVUTcnjgHvUOtRHWU2wciCL4b263ZgQtBkxjOuBIcN2JQ3nlGKKXEPM38/s1600/home-quota_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxzKXTJt-U8tGDhFFVbNVLPD14J5cNoK7_UQI9Ez0v9UwnVLWo7JN0XyYiI8qPfeZfG5stO_irf99QIEskJPSWVUTcnjgHvUOtRHWU2wciCL4b263ZgQtBkxjOuBIcN2JQ3nlGKKXEPM38/s640/home-quota_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /></div>
<div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Save & exit the file.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
In this example i have add user and group quota options on /home</div>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:2 Remount  /home file system via  mount command</h5>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: lime; font-size: large;">[root@hackthesec ~]# mount -o remount /home</span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Now recheck the /home file system whether Quota is enable or not.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# mount | grep /home
/dev/mapper/centos-home on /home type ext4 (</span><span style="color: lime;">rw,relatime,seclabel,quota,usrquota,grpquota,data=ordered</span><span style="color: white;">)</span></span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:3 Create Quota Database Files using quotacheck</h5>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: white;">[root@hackthesec home]# </span><span style="color: lime;">quotacheck </span><span style="color: white;">-cugv /home</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Whereas :</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
-c : create quota file and don’t use the existing file<br />-v : verbose ouput<br />-u : user disk quota<br />-g : group disk quota</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Above Command will create aquota.user & aquota.group files under /home</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Turn on quota on /home using below command :</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">quotaon </span><span style="color: white;">/home/</span></span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:4 Assign user & group disk quota via edquota commands</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Syntax <span style="border: 0px; color: #333399; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"># edquota -u <User_Name></span></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="border: 0px; color: #333399; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"># edquota -g <Group_Name></span></div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">edquota </span><span style="color: white;">-u jack</span></span></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTYIRoxgLj0c-lzeqSt8C4U3tO_kVGm_XaTvE5As1RD_BNdjn29hdNV1UcWMc59ibJXJh_FWhyvB2dDzB_C2bhnLPSeRQHl_ot5Ms8mFd4nIognW4U345hSez-wIxL4vW-WshwZWtgYY2F/s1600/edquota_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="71" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTYIRoxgLj0c-lzeqSt8C4U3tO_kVGm_XaTvE5As1RD_BNdjn29hdNV1UcWMc59ibJXJh_FWhyvB2dDzB_C2bhnLPSeRQHl_ot5Ms8mFd4nIognW4U345hSez-wIxL4vW-WshwZWtgYY2F/s640/edquota_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /></div>
<div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# edquota -g </span><span style="color: lime;">sys_admin</span></span></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiunFvua0GM8I-FCccUA_rPjKDOV-cPaLKWGkJQ93zmMLSt9njJV_coUpGAkzBRmb4-8Jvpa8_BVOBv9UBKs2XkQin2Ijwa0gIQgeUi0TvSou70jNBk-YnBud4A2jSXLj4m2pK0x-ChumtT/s1600/group-quota_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="66" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiunFvua0GM8I-FCccUA_rPjKDOV-cPaLKWGkJQ93zmMLSt9njJV_coUpGAkzBRmb4-8Jvpa8_BVOBv9UBKs2XkQin2Ijwa0gIQgeUi0TvSou70jNBk-YnBud4A2jSXLj4m2pK0x-ChumtT/s640/group-quota_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /></div>
<div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
As shown above we have two kind of <span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Disk quota limits</span> :</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">soft</span> : It will warn the users if the soft limit of disk quota reached ( size is in KB), in above example for jack user soft limit is 5500 KB ( approx 5.5MB )</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">hard</span> : It will not allow the users to create new files once the hard limit is reached. ( Size in KB ), in above example hard limit for jack user is 6000 KB ( approx 6 MB )</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Note</span> : We can also set the Quota on the basis of the inodes ( i.e numbers of files that the user can create on particular file system)</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Let’s take an example , login as jack user and try to create a file of 8MB.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;"><span style="font-size: large;">[root@hackthesec ~]# su - jack</span><span style="font-size: 12px;">
</span></span><span style="font-size: large;"><span style="color: lime;">[jack@hackthesec ~]$ dd if=/dev/zero of=bgfile bs=1M count=8</span><span style="color: white;">dm-2: warning, user block quota exceeded.
dm-2: write failed, user block limit reached.
</span><span style="color: lime;">dd: error writing ‘bgfile’: Disk quota exceeded
</span><span style="color: white;">6+0 records in
5+0 records out
</span><span style="color: lime;">6144000 bytes (6.1 MB) copied, 0.00711317 s, 864 MB/s</span></span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
As we see above soft & hard limit is exceeded for jack user. Now onwards user jack can’t create new files.</div>
</div>
<div>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:5 Display Quota report for Users in human readable</h5>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">repquota </span><span style="color: white;">-as</span></span></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEga-hA4FF8pzN753xmvxYK8mu7430xgtZriYdTfeOAnI5r9KejUa3KWZsQbtFfTJJpAQZMIgCEu5uFFkfnoC6Fvh8QURBsf6dQFIAtsY6Shr3J5tFA0sC4oXXZYu-D1fzqBQbB5nmJnChCB/s1600/repquota_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="150" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEga-hA4FF8pzN753xmvxYK8mu7430xgtZriYdTfeOAnI5r9KejUa3KWZsQbtFfTJJpAQZMIgCEu5uFFkfnoC6Fvh8QURBsf6dQFIAtsY6Shr3J5tFA0sC4oXXZYu-D1fzqBQbB5nmJnChCB/s640/repquota_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /></div>
<div>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Step:6 Configure Grace Period for Soft Limit</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Grace period is the amount of time during which soft limit can can be exceeded, once the grace period reached then soft limit will become the hard limit.</div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
Use the edquota command to set Grace period .</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-size: large;"><span style="color: white;">[root@hackthesec ~]# </span><span style="color: lime;">edquota </span><span style="color: white;">-t</span></span></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX89YTMcGWBxDjPOH3QoUBomjuQCaWz2UQTdtmK_p3H3HCBtSc8K0wgxMO37o962c_RK_h5RV3RMglWh4jXyObfyL3uqnENiJAOs1TZwgiQTCH8Oo153_nZl3qN-a98Qv3Gif66AccXV-i/s1600/Soft-limit-grace-period_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="93" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX89YTMcGWBxDjPOH3QoUBomjuQCaWz2UQTdtmK_p3H3HCBtSc8K0wgxMO37o962c_RK_h5RV3RMglWh4jXyObfyL3uqnENiJAOs1TZwgiQTCH8Oo153_nZl3qN-a98Qv3Gif66AccXV-i/s640/Soft-limit-grace-period_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /><br /><a href="http://www.hackthesec.co.in/" target="_blank">www.hackthesec.co.in</a><br /><a href="https://www.twitter.com/hackthesecurity" target="_blank">HackTheSec-Twitter</a></div>
</div>