centos6.5下openssh升級至7.7p1

————-鏡像掛載———–

mkdir /media/cdrom

mount /dev/cdrom /media/cdrom

cd /etc/yum.repos.d

mkdir ever_repo

mv *.repo ever_repo/

vi local.repo

[name]

name="local repo"

baseurl=file:///media/cdrom/

enabeld=1

gpgcheck=0

yum clean all

yum makecache

———–安裝telnet服務(wù)————

yum -y install telnet-server* telnet

vi /etc/xinetd.d/telnet (將其中disable字段的yes改為no以啟用telnet服務(wù))

mv /etc/securetty /etc/securetty.old #允許root用戶通過telnet登錄

service xinetd start #啟動telnet服務(wù)

chkconfig xinetd on #使telnet服務(wù)開機啟動，避免升級過程中服務(wù)器意外重啟后無法遠程登錄系統(tǒng)

chkconfig iptables off #關(guān)閉防火墻永久

service iptables stop #即時生效，重啟失效

—————正式升級——–

yum -y install gcc zlib-devel openssl-devel

上傳openssh升級包

mkdir /back

mv /etc/ssh/ /back/ssh.back

tar xf openssh-7.7p1.tar.gz

cd openssh-7.7p1/

./configure –prefix=/usr –sysconfdir=/etc/ssh

make

make install

cp /root/openssh-7.7p1/contrib/redhat/sshd.init /etc/init.d/sshd

chkconfig –add sshd

service sshd restart

vi /etc/ssh/sshd_config #(修改配置文件 PermitRootLogin yes PasswordAuthentication yes )

vi /etc/selinux/config (關(guān)閉selinux)

setenforce 0 (關(guān)閉selinux生效)

getgetenforce (驗證 Permissive)

—————-驗證openssh沒問題后關(guān)閉telnet服務(wù)——

mv /etc/securetty.old /etc/securetty

chkconfig xinetd off

service xinetd stop

openssh7.7p1tar包