1、LINUX-SSHh級及回退方案1 .驗證對比與記錄的當前ssh及ssl版本是否一致ssh-V2 .驗證對比與記錄的當前系統(tǒng)版本是否一致cat/etc/redhat-release一、配置yum源方法一：服務器中插入對應版本系統(tǒng)鏡像光盤。cd/etc/yum.repos.d/轉移原始配置文件lsmkdirbakmv*.repobak重新生成配置文件viyum.repolocal_rhel6name=local_rhel6baseurl=file:/mnt/enabled=1gpgcheck=0掛載光盤鏡像mount/dev/sr0/mnt清除yum緩存yumcleanall方法二：在系統(tǒng)中傳入

2、yum軟件包創(chuàng)建yum目錄cd/homemkdiryum向yum文件夾中考入yum軟件包cd/etc/yum.repos.d/轉移原始配置文件lsmkdirbakmv*.repobak重新生成配置文件viyum.repolocal_rhel6name=local_rhel6baseurl=file:/home/yumenabled=1gpgcheck=0掛載光盤鏡像mount/dev/sr0/mnt清除yum緩存yumcleanall二、安裝Telnet查看telnet安裝情況rpm-qa|greptelnet安裝telnetyuminstalltelnet*將disable的yes修改為no

3、vi/etc/xinetd.d/telnetservicetelnetflags=REUSEsocket_type=streamwait=nouser=rootserver=/usr/sbin/in.telnetdlog_on_failure+=USERIDdisable=no重啟服務servicexinetdrestart查詢防火墻狀態(tài)/etc/init.d/iptablesstatus臨時關閉防火墻/etc/init.d/iptablesstop創(chuàng)建telnet登錄用戶useraddteltestpasswdteltest測試telnet登錄三、安裝相關軟件查詢軟件安裝狀態(tài)rpm-qa|g

4、repgccrpm-qa|grepzlib-develrpm-qa|grepopenssl-develrpm-qa|greppam-devel安裝軟件yum-yinstallgccyum-yinstallzlib-develyum-yinstallopenssl-develyum-yinstallpam-devel四、編譯安裝opensshcd/homemkdirsshtest傳入openssh7.4文件解壓并進入軟件目錄tar-xvfopenssh-7.4p1.tar.gzcdopenssh-7.4p1備份公鑰cp-ar/etc/ssh/etc/ssh_bak編譯安裝./configure-

5、prefix=/usr-sysconfdir=/etc/ssh-with-pam-without-zlib-version-check-with-openssl-includes=/usr/-with-md5-passwords-mandir=/usr/share/manmakemakeinstall修改/etc/ssh/sshd_config文件sed-is/GSSAPIAuthentication/#GSSAPIAuthentication/g/etc/ssh/sshd_configsed-is/GSSAPIAuthentication/#GSSAPIAuthentication/g/et

6、c/ssh/ssh_configsed-is/GSSAPICleanupCredentials/#GSSAPICleanupCredentials/g/etc/ssh/sshd_config允許root登錄vi/etc/ssh/sshd_config#PermitRootLoginyes將ssh設置為開機啟動chkconfigsshdonRedhat7版本命令行有變化systemctlenablesshd.service重啟服務servicesshdrestart驗證版本及登錄ssh-V關閉TELNE橙錄將disable的no修改為yesvi/etc/xinetd.d/telnetservic

7、etelnetflags=REUSEsocket_type=streamwait=nouser=rootserver=/usr/sbin/in.telnetdlog_on_failure+=USERIDdisable=yes重啟服務servicexinetdrestart五、回退方案卸載舊版sshyum-yremoveopenssh重裝舊版sshyum-yinstallopensshopenssh-clientsopenssh-server將ssh設置為開機啟動chkconfigsshdon重啟服務servicesshdrestart驗證版本及登錄ssh-V六、禁用R系列服務檢查rsh、rexec、rlogin服務是否關閉監(jiān)聽端口rexec512端口rlogin513端口netstat-an|grep512netstat-an|grep513netstat-an|grep514chkconfig-list基于x