linux系统优化安全升级

《linux系统优化安全升级》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、电信RHEL6.6-4.Hostnamesed-i"2cHOSTNAME=abm25"/etc/sysconfig/network>/etc/resolv.confecho'secure@1W'

2、passwdroot--stdiniptables-Fserviceiptablessave-3.vmtoolslftp-uweihu,pi=3yuaNsftp://136.5.176.162<

3、s-8.6.11-1310128.tar.gzcdvmware-tools*./vmware-install.pl--default-2.Yummv/etc/yum.repos.d/rhel-source.repo/tmpvi/etc/yum.repos.d/rhel-source.repo[rhel-source]name=RedHatEnterpriseLinux$releasever-$basearch-Sourcebaseurl=http://136.5.176.162/iso/redhat6.6/en

4、abled=1gpgcheck=1gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-releasesed-i"3cbaseurl=http://136.5.176.162/iso/redhat6.4/"/etc/yum.repos.d/rhel-source.repoyumcleanallyummakecacheyuminstall-y ftplftpzlib*openssl*pam*gdmrubytelnet*vsftpd*gccdstatmcelogiot

5、oplsscsilibstdc++*libcap*yumgroupinstall-y basic-desktop x11 development eclipse compat-libraries storage-client-multipath nfs-file-server-1.双网卡cd/etc/sysconfig/network-scripts/mvifcfg-enp1s0f0bakifcfg-enp1s0f0mvifcfg-enp130s0f1bakifcfg-enp130s0f1 echo"ife

6、nslavebond0eth1eth5">>/etc/rc.d/rc.localcatifcfg-bond0viifcfg-bond0DEVICE=bond0BOOTPROTO=yesIPADDR=136.5.225.100GATEWAY=136.5.225.97NETMASK=255.255.255.224ONBOOT=yesBONDING_OPTS="mode=1miimon=200"--------------catifcfg-enp130s0f1 viifcfg-eth1DEVICE=eth1ONBOO

7、T=yesBOOTPROTO=noneMASTER=bond0SLAVE=yesTYPE=Ethernet--------------catifcfg-enp1s0f0 viifcfg-eth1 DEVICE=enp1s0f0ONBOOT=yesBOOTPROTO=noneMASTER=bond0SLAVE=yesTYPE=Ethernet0.ueradduseraddibnmsecho"Wfz#2015"

8、passwdibnms--stdinmkdir/ibnmschownibnms:ibnms/ibnmsu

9、sermod-d/ibnmsibnmsuseraddweihuecho"pi=3yuaN"

10、passwdweihu--stdinuseradduserecho"user,.123"

11、passwduser--stdinuserdelnobodyuserdelftp1.profileecho"TMOUT=300">>/etc/profilesed-i's/HISTSIZE=1000/HISTSIZE=50000/g'/etc/profileecho'sttyerase^H'>>/etc/profileecho"">

12、>/etc/profile#2.sucp/etc/pam.d/su/etc/pam.d/su.baksed-i"6cauthrequiredpam_wheel.souse_uid"/etc/pam.d/suusermod-a-Gwheelweihuecho'SU_WHEEL_ONLYyes'>>/etc/login.defs#3.密码cp/etc/login.defs/etc/logi