网站美食建设图片素材,莱芜吧百度贴吧,莱芜雪野湖国际会议中心,前端网页设计样例开发的系统准备上线#xff0c;甲方对欧拉服务器进行了扫描#xff0c;发现openssh版本为8.2p1#xff0c;存在漏洞#xff0c;因此需要升级openssh至9.7p1。欧拉系统版本为20.03 SP3。
1、下载openssh 9.7p1
https://www.openssh.com/releasenotes.html#xff0c; 将下…开发的系统准备上线甲方对欧拉服务器进行了扫描发现openssh版本为8.2p1存在漏洞因此需要升级openssh至9.7p1。欧拉系统版本为20.03 SP3。
1、下载openssh 9.7p1
https://www.openssh.com/releasenotes.html 将下载的包放在/opt目录下
2、安装telnet
yum -y install telnet yum -y install telnet-server systemctl enable telnet.socket systemctl start telnet.socket mv /etc/security /etc/security.bak
3、安装依赖
yum -y install gcc keyutils-libs rpm-build krb5-devel libcom_err-devel libselinux-devel pam-* openssl-devel pkgconfig vsftpd zlib*
4、备份文件
mv /etc/ssh /etc/ssh.bak mv /usr/bin/ssh /usr/bin/ssh.bak mv /usr/sbin/sshd /usr/sbin/sshd.bak
5、清除openssh rpm包
rpm -e rpm -qa | grep openssh --nodeps
6、编译安装openssh
cd /opt tar zxvf openssh-9.7p1.tar.gz cd /opt/openssh-9.7p1/ ./configure --sysconfdir/etc/ssh make make install
7、查看sshd
which sshd
8、修改文件
cp /opt/openssh-9.7p1/contrib/redhat/sshd.init /etc/init.d/sshd sed -i ‘25cSSHD/usr/local/sbin/sshd’ /etc/init.d/sshd sed -i ‘41c/usr/local/bin/ssh-keygen -A’ /etc/init.d/sshd 下面这个是一行 sed -i “/#PermitRootLogin prohibit-password/c\PermitRootLogin yes” /etc/ssh/sshd_config cp /opt/openssh-9.7p1/contrib/ssh-copy-id /usr/local/bin/ chmod x /opt/openssh-9.7p1/contrib/ssh-copy-id
9、验证
systemctl daemon-reload service sshd start /usr/local/bin/ssh -V
10、开启安全文件
mv /etc/security.bak /etc/security
