linux系统优化安全升级.docxVIP

电信RHEL6.6 -4.Hostname sed -i 2c HOSTNAME=abm25 /etc/sysconfig/network /etc/resolv.conf echo secure@1W|passwd root --stdin iptables -F service iptables save -3.vmtools lftp -u weihu,pi=3yuaN s62EOF get VMwareTools-8.6.11-1310128.tar.gz bye EOF tar zxvf VMwareTools-8.6.11-1310128.tar.gz cd vmware-tools* ./vmware-install.pl --default -2.Yum mv /etc/yum.repos.d/rhel-source.repo /tmp vi /etc/yum.repos.d/rhel-source.repo [rhel-source] name=Red Hat Enterprise Linux $releasever - $basearch - Source baseurl=62/iso/redhat6.6/ enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release sed -i 3c baseurl=62/iso/redhat6.4/ /etc/yum.repos.d/rhel-source.repo yum clean all yum makecache yum install -y?ftp lftp zlib* openssl* pam* gdm ruby telnet* vsftpd* \ gcc dstat mcelog iotop lsscsi libstdc++* libcap* yum groupinstall -y?basic-desktop?x11?development?eclipse \ ?compat-libraries?storage-client-multipath?nfs-file-server \ -1.双网卡 cd /etc/sysconfig/network-scripts/ mv ifcfg-enp1s0f0 bakifcfg-enp1s0f0 mv ifcfg-enp130s0f1 bakifcfg-enp130s0f1? echo ifenslave bond0 eth1 eth5/etc/rc.d/rc.local cat ifcfg-bond0 vi ifcfg-bond0 DEVICE=bond0 BOOTPROTO=yes IPADDR=00 GATEWAY=7 NETMASK=24 ONBOOT=yes BONDING_OPTS=mode=1 miimon=200 -------------- cat ifcfg-enp130s0f1 ? vi ifcfg-eth1 DEVICE=eth1 ONBOOT=yes BOOTPROTO=none MASTER=bond0 SLAVE=yes TYPE=Ethernet -------------- cat ifcfg-enp1s0f0 ? vi ifcfg-eth1 ? DEVICE=enp1s0f0 ONBOOT=yes BOOTPROTO=none MASTER=bond0 SLAVE=yes TYPE=Ethernet 0.ueradd useradd ibnms echo Wfz#2015|passwd ibnms --stdin mkdir /ibnms chown ibnms:ibnms /ibnms usermod -d /ibnms ibnms useradd weihu echo pi=3yuaN|passwd weihu --stdin useradd user echo user,.123|passwd user --stdin userdel nobody userdel ftp profile echo TMOUT=300/etc/profile sed -i s/HISTSIZE=1000/HISTSIZE=50000/g /etc/profile echo stty erase ^H /etc/profile echo /etc/profile #2.su cp /etc/pam.d/su /etc/pam.d/su.bak sed -i 6c auth required pam_wheel.so use_uid /etc/pam.d/su usermod -a -G whee