1、关于提示符

在SUSElinux中：

localhost:~ # set|grep PS1
PS1=$'\\[\E[1m\E[31m\\]\\h:\\w # \\[\E(B\E[m\\]'
localhost:~ #

在CentOSlinux中：

[root@localhost ~]# set|grep PS1
PS1='[\u@\h \W]\$ '
[root@localhost ~]#

2、关于主机名修改

在SUSElinux中：

night:~ # cat /etc/HOSTNAME
night
night:~ #

在CentOSlinux中：

[root@localhost ~]# cat /etc/sysconfig/network
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=localhost.localdomain
GATEWAY=192.168.100.1
[root@localhost ~]#

3、关于ip/gateway/dns

在SUSElinux中：

night:~ # cat /etc/sysconfig/network/ifcfg-eth0
BOOTPROTO='static'  //静态方式获取
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='192.168.100.210/24'   //ip地址和子网掩码
MTU=''
NAME='82540EM Gigabit Ethernet Controller'
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'     //开机激活网卡
USERCONTROL='no'
night:~ # cat /etc/sysconfig/network/routes
default 192.168.100.1 - -
night:~ # cat /etc/resolv.conf
### /etc/resolv.conf file autogenerated by netconfig!
#
# Before you change this file manually, consider to define the
# static DNS configuration using the following variables in the
# /etc/sysconfig/network/config file:
#     NETCONFIG_DNS_STATIC_SEARCHLIST
#     NETCONFIG_DNS_STATIC_SERVERS
#     NETCONFIG_DNS_FORWARDER
# or disable DNS configuration updates via netconfig by setting:
#     NETCONFIG_DNS_POLICY=''
#
# See also the netconfig(8) manual page and other documentation.
#
# Note: Manual change of this file disables netconfig too, but
# may get lost when this file contains comments or empty lines
# only, the netconfig settings are same with settings in this
# file and in case of a "netconfig update -f" call.
#
### Please remove (at least) this line when you modify the file!
search localdomain
nameserver 192.168.100.1
nameserver 8.8.8.8
night:~ #

关于CentOSlinux中：

[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Intel Corporation 82540EM Gigabit Ethernet Controller
DEVICE=eth0      //设备名称
BOOTPROTO=static    //静态方式
BROADCAST=192.168.100.255  //广播地址
HWADDR=08:00:27:8E:37:90   //网卡地址
IPADDR=192.168.100.200   //ip地址
NETMASK=255.255.255.0  //子网掩码
NETWORK=192.168.100.0   //网络地址
ONBOOT=yes      //开机激活网卡
[root@localhost ~]# cat /etc/sysconfig/network
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=localhost.localdomain
GATEWAY=192.168.100.1
[root@localhost ~]# cat /etc/resolv.conf
nameserver 192.168.100.1
nameserver 8.8.8.8
search localhost
[root@localhost ~]#

重启网络的方法相同：/etc/init.d/networkstart|stop|restart

4、关于版本查看

在SUSElinux中：

night:~ # cat /etc/issue
Welcome to SUSE Linux Enterprise Server 11 SP2  (x86_64) - Kernel \r (\l).
night:~ # lsb_release -a
LSB Version:    core-2.0-noarch:core-3.2-noarch:core-4.0-noarch:core-2.0-x86_64:core-3.2-x86_64:core-4.0-x86_64:desktop-4.0-amd64:desktop-4.0-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch
Distributor ID: SUSE LINUX
Description:    SUSE Linux Enterprise Server 11 (x86_64)
Release:        11
Codename:       n/a
night:~ #

在CentOSlinux中：

[root@localhost ~]# cat /etc/issue
CentOS release 5.9 (Final)
Kernel \r on an \m
[root@localhost ~]# cat /etc/redhat-release
CentOS release 5.9 (Final)
[root@localhost ~]# lsb_release -a
LSB Version:    :core-4.0-amd64:core-4.0-ia32:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-ia32:graphics-4.0-noarch:printing-4.0-amd64:printing-4.0-ia32:printing-4.0-noarch
Distributor ID: CentOS
Description:    CentOS release 5.9 (Final)
Release:        5.9
Codename:       Final
[root@localhost ~]#

5、关于hosts文件

两者一样

6、关于软件包管理

在SUSElinux中：

night:~ # rpm -qa | grep sshd
yast2-sshd-2.17.2-1.21
night:~ #

在CentOSlinux中：

[root@localhost ~]# rpm -qa | grep ssh
openssh-clients-4.3p2-82.el5
openssh-askpass-4.3p2-82.el5
openssh-4.3p2-82.el5
openssh-server-4.3p2-82.el5
[root@localhost ~]#

在SUSElinux中：

night:~ # zypper search ftp
Loading repository data...
Reading installed packages...
S | Name              | Summary                                       | Type
--+-------------------+-----------------------------------------------+-----------
| atftp             | Advanced TFTP Server and Client               | package
| atftp             | Advanced TFTP Server and Client               | srcpackage
i | lukemftp          | Enhanced FTP Client                           | package
| lukemftp          | Enhanced FTP Client                           | srcpackage
| ncftp             | A Comfortable FTP Program                     | package
| ncftp             | A Comfortable FTP Program                     | srcpackage
| php5-ftp          | PHP5 Extension Module                         | package
| php53-ftp         | PHP5 Extension Module                         | package
| pure-ftpd         | A Lightweight, Fast, and Secure FTP Server    | package
| pure-ftpd         | A Lightweight, Fast, and Secure FTP Server    | srcpackage
| tftp              | Trivial File Transfer Protocol (TFTP)         | package
| tftp              | Trivial File Transfer Protocol (TFTP)         | srcpackage
| vsftpd            | Very Secure FTP Daemon - Written from Scratch | package
| vsftpd            | Very Secure FTP Daemon - Written from Scratch | srcpackage
i | yast2-ftp-server  | YaST2 - FTP configuration                     | package
| yast2-ftp-server  | YaST2 - FTP configuration                     | srcpackage
i | yast2-tftp-server | YaST2 - TFTP Server Configuration             | package
| yast2-tftp-server | YaST2 - TFTP Server Configuration             | srcpackage
night:~ # zypper install vsftpd
Loading repository data...
Reading installed packages...
Resolving package dependencies...
The following NEW package is going to be installed:
vsftpd
1 new package to install.
Overall download size: 126.0 KiB. After the operation, additional 290.0 KiB will be used.
Continue? [y/n/?] (y): n
night:~ # yast2 -i vsftpd
night:~ #

在CentOSlinux中：

[root@localhost ~]# yum search ftp
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
* base: mirrors.neusoft.edu.cn
* extras: mirrors.neusoft.edu.cn
* updates: mirrors.neusoft.edu.cn
============================================================================ Matched: ftp =============================================================================
bug-buddy.x86_64 : A bug reporting utility for GNOME
esound.i386 : 允许几个音频流在单个音频设备上播放。
esound.x86_64 : 允许几个音频流在单个音频设备上播放。
esound-devel.i386 : 用于 EsounD 程序的开发文件。
esound-devel.x86_64 : 用于 EsounD 程序的开发文件。
gdm.x86_64 : GNOME 显示管理器。
……省略……

7、关于用户管理

在SUSElinux中：

night:~ # useradd --help
Usage: useradd ...
useradd - create a new user
-c comment     Set the GECOS field for the new account
--show-defaults Print default values
--save-defaults Save modified default values
-D binddn      Use dn "binddn" to bind to the LDAP directory
-d homedir     Home directory for the new user
-e expire      Date on which the new account will be disabled
-f inactive    Days after a password expires until account is disabled
-G group,...   List of supplementary groups
-g gid         Name/number of the users primary group
-k skeldir     Specify an alternative skel directory
-m             Create home directory for the new user
-o             Allow duplicate (non-unique) UID
-P path        Search passwd, shadow and group file in "path"
-p password    Encrypted password as returned by crypt(3)
-u uid         Force the new userid to be the given number
-U umask       Umask value used for creating home directory
-r, --system   Create a system account
-s shell       Name of the user's login shell
--service srv   Add account to nameservice 'srv'
--help     Give this help list
--usage    Give a short usage message
-v, --version  Print program version
Valid services for --service are: files, ldap
night:~ # useradd --show-defaults
GROUP=100
HOME=/home
INACTIVE=-1
EXPIRE=
SHELL=/bin/bash
SKEL=/etc/skel
GROUPS=video,dialout
CREATE_MAIL_SPOOL=no
UMASK=022
night:~ # useradd test
night:~ # id test
uid=1000(test) gid=100(users) groups=16(dialout),33(video),100(users)
night:~ # grep test /etc/passwd
test:x:1000:100::/home/test:/bin/bash
night:~ # cat /etc/default/useradd
GROUP=100
HOME=/home
INACTIVE=-1
EXPIRE=
SHELL=/bin/bash
SKEL=/etc/skel
GROUPS=video,dialout
CREATE_MAIL_SPOOL=no
night:~ #

在CentOSlinux中：

[root@localhost ~]# useradd --help
Usage: useradd [options] LOGIN
Options:
-b, --base-dir BASE_DIR       base directory for the new user account
home directory
-c, --comment COMMENT         set the GECOS field for the new user account
-d, --home-dir HOME_DIR       home directory for the new user account
-D, --defaults                print or save modified default useradd
configuration
-e, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE
-f, --inactive INACTIVE       set password inactive after expiration
to INACTIVE
-g, --gid GROUP               force use GROUP for the new user account
-G, --groups GROUPS           list of supplementary groups for the new
user account
-h, --help                    display this help message and exit
-k, --skel SKEL_DIR           specify an alternative skel directory
-K, --key KEY=VALUE           overrides /etc/login.defs defaults
-m, --create-home             create home directory for the new user
account
-l,                       do not add user to lastlog database file
-M,                       do not create user's home directory(overrides /etc/login.defs)
-r,                       create system account
-o, --non-unique              allow create user with duplicate
(non-unique) UID
-p, --password PASSWORD       use encrypted password for the new user
account
-s, --shell SHELL             the login shell for the new user account
-u, --uid UID                 force use the UID for the new user account
-Z, --selinux-user SEUSER     use a specific SEUSER for the SELinux user mapping
[root@localhost ~]# useradd -D
GROUP=100
HOME=/home
INACTIVE=-1
EXPIRE=
SHELL=/bin/bash
SKEL=/etc/skel
CREATE_MAIL_SPOOL=yes
[root@localhost ~]# useradd test
[root@localhost ~]# id test
uid=500(test) gid=501(test) groups=501(test) context=root:system_r:unconfined_t:SystemLow-SystemHigh
[root@localhost ~]# grep test /etc/passwd
test:x:500:501::/home/test:/bin/bash
[root@localhost ~]# cat /etc/default/useradd
# useradd defaults file
GROUP=100
HOME=/home
INACTIVE=-1
EXPIRE=
SHELL=/bin/bash
SKEL=/etc/skel
CREATE_MAIL_SPOOL=yes
[root@localhost ~]#

关于默认所属用户组的差别还是很大的。这个时候会发现在SUSElinux中并没有为用户生成一个家目录，这个时候可以这样做。

night:~ # useradd -m test
night:~ # ll -d /home/test/
drwxr-xr-x 5 test users 4096 Sep 26 19:42 /home/test/
night:~ #

这个文件夹的权限和CentOS也是有区别的。

8、关于防火墙

在SUSElinux中：

关于控制程序

night:~ # chkconfig --list | grep fire
SuSEfirewall2_init        0:off  1:off  2:off  3:on   4:off  5:on   6:off
SuSEfirewall2_setup       0:off  1:off  2:off  3:on   4:off  5:on   6:off
night:~ # which rcSuSEfirewall2
/sbin/rcSuSEfirewall2
night:~ # file /sbin/rcSuSEfirewall2
/sbin/rcSuSEfirewall2: symbolic link to `/etc/init.d/SuSEfirewall2_setup'
night:~ # /etc/init.d/SuSEfirewall2_init
Usage: /etc/init.d/SuSEfirewall2_init {start|stop|status|restart|reload|force-reload}
night:~ # /etc/init.d/SuSEfirewall2_setup
Usage: /etc/init.d/SuSEfirewall2_setup {start|stop|status|restart|reload|force-reload}
night:~ #

关于配置文件

night:~ # cat /etc/sysconfig/SuSEfirewall2 | grep -v ^#|grep -v ^$
FW_DEV_EXT="any eth0"
FW_DEV_INT=""
FW_DEV_DMZ=""
FW_ROUTE="no"
FW_MASQUERADE="no"
FW_MASQ_DEV="zone:ext"
FW_MASQ_NETS="0/0"
FW_NOMASQ_NETS=""
FW_PROTECT_FROM_INT="no"
FW_SERVICES_EXT_TCP="22"   //tcp端口修改，多个端口空格隔开
FW_SERVICES_EXT_UDP=""
FW_SERVICES_EXT_IP=""
FW_SERVICES_EXT_RPC=""
FW_CONFIGURATIONS_EXT=""
FW_SERVICES_DMZ_TCP=""
FW_SERVICES_DMZ_UDP=""
FW_SERVICES_DMZ_IP=""
FW_SERVICES_DMZ_RPC=""
FW_CONFIGURATIONS_DMZ=""
FW_SERVICES_INT_TCP=""
FW_SERVICES_INT_UDP=""
FW_SERVICES_INT_IP=""
FW_SERVICES_INT_RPC=""
FW_CONFIGURATIONS_INT=""
FW_SERVICES_DROP_EXT=""
FW_SERVICES_DROP_DMZ=""
FW_SERVICES_DROP_INT=""
FW_SERVICES_REJECT_EXT=""
FW_SERVICES_REJECT_DMZ=""
FW_SERVICES_REJECT_INT=""
FW_SERVICES_ACCEPT_EXT=""
FW_SERVICES_ACCEPT_DMZ=""
FW_SERVICES_ACCEPT_INT=""
FW_SERVICES_ACCEPT_RELATED_EXT=""
FW_SERVICES_ACCEPT_RELATED_DMZ=""
FW_SERVICES_ACCEPT_RELATED_INT=""
FW_TRUSTED_NETS=""
FW_ALLOW_INCOMING_HIGHPORTS_TCP=""
FW_ALLOW_INCOMING_HIGHPORTS_UDP=""
FW_FORWARD=""
FW_FORWARD_REJECT=""
FW_FORWARD_DROP=""
FW_FORWARD_MASQ=""
FW_REDIRECT=""
FW_LOG_DROP_CRIT="yes"
FW_LOG_DROP_ALL="no"
FW_LOG_ACCEPT_CRIT="yes"
FW_LOG_ACCEPT_ALL="no"
FW_LOG_LIMIT=""
FW_LOG=""
FW_KERNEL_SECURITY="yes"
FW_STOP_KEEP_ROUTING_STATE="no"
FW_ALLOW_PING_FW="yes"
FW_ALLOW_PING_DMZ="no"
FW_ALLOW_PING_EXT="no"
FW_ALLOW_FW_SOURCEQUENCH=""
FW_ALLOW_FW_BROADCAST_EXT="no"
FW_ALLOW_FW_BROADCAST_INT="no"
FW_ALLOW_FW_BROADCAST_DMZ="no"
FW_IGNORE_FW_BROADCAST_EXT="yes"
FW_IGNORE_FW_BROADCAST_INT="no"
FW_IGNORE_FW_BROADCAST_DMZ="no"
FW_ALLOW_CLASS_ROUTING=""
FW_CUSTOMRULES=""
FW_REJECT=""
FW_REJECT_INT="yes"
FW_HTB_TUNE_DEV=""
FW_IPv6=""
FW_IPv6_REJECT_OUTGOING=""
FW_IPSEC_TRUST="no"
FW_ZONES=""
FW_USE_IPTABLES_BATCH=""
FW_LOAD_MODULES="nf_conntrack_netbios_ns"
FW_FORWARD_ALWAYS_INOUT_DEV=""
FW_FORWARD_ALLOW_BRIDGING=""
FW_BOOT_FULL_INIT=""
night:~ #

另外，可以将iptables的规则定义成为一个shellscript，然后放在/etc/init.d里面利用chkconfig来管理，这样的话更加方便，可以定义成类似redhat（centos）的管理iptables的方式。

再或者，在SUSElinux中可以将要启动的命令放置在脚本/etc/init.d/after.local中；默认该脚本是不存在的，可自行创建，after.local在系统启动过程中会调用。

注意：如果使用iptables的脚本或者是iptables的命令的话，要让/etc/init.d/SuSEfirewall2_setup在开机的时候是off的！

补充：在SUSElinux中的用户的一些命令重命名的一些命令放置在/etc/bash.bashrc；而CentOS中放置在/etc/profile

在CentOSlinux中：

[root@localhost ~]# chkconfig --list|grep iptables
iptables        0:off   1:off   2:on    3:on    4:on    5:on    6:off
[root@localhost ~]# /etc/init.d/iptables
Usage: /etc/init.d/iptables {start|stop|reload|restart|condrestart|status|panic|save}
[root@localhost ~]# cat /etc/sysconfig/iptables
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
[root@localhost ~]#

9、关于管理工具

在SUSElinux中，yast2可以完成大部分的工作

在CentOSlinux中：

10、补充说明，在securecrt连SUSElinux的时候，提示密钥认证，这个时候可以进行如下操作

linux-08wz:~ # vim /etc/ssh/sshd_config
PubkeyAuthentication no #<==默认是注释的，而且是yes，只要去掉注释，并改为no
……
linux-08wz:~ # rcsshd restart
Shutting down SSH daemon                                                                                                                                    done
Starting SSH daemon                                                                                                                                         done
linux-08wz:~ #