Shulou(Shulou.com)06/01 Report--

In this issue, the editor will bring you about how to upgrade openssh7.9. The article is rich in content and analyzes and narrates it from a professional point of view. I hope you can get something after reading this article.

Umask 022

Yum install-y pam-devel libselinux-devel krb5-devel zlib-devel gcc make

LANG=C

Cd / root

Tar xf openssl-1.0.2r.tar.gz

Tar xf openssh-7.9p1.tar.gz

Cd / root/openssl-1.0.2r

. / config-- prefix=/usr/local/openssl-1.0.2r-- openssldir=/usr/local/openssl-1.0.2r zlib shared & & make-j 4 & & make install

Echo'/ usr/local/openssl-1.0.2r/lib' > / etc/ld.so.conf.d/openssl.conf

Ldconfig

Chmod 600 / etc/ssh/ssh_host_*

Cd / root/openssh-7.9p1

. / configure-prefix=/usr/local/openssh7.9p1-sysconfdir=/etc/ssh-with-selinux-with-pam\

-- with-ssl-dir=/usr/local/openssl-1.0.2r\

-with-md5-passwords-with-zlib-mandir=/usr/share/man\

-with-kerberos5-with-xauth-with-sandbox\

& & make-j 4 & & make install

Alias cp='cp'

Cp / root/openssh-7.9p1/contrib/redhat/sshd.init / etc/init.d/sshd

Chmod + x / etc/init.d/sshd

Cp-f / usr/local/openssh7.9p1/bin/* / usr/bin/

Cp-f / usr/local/openssh7.9p1/sbin/* / usr/sbin/

Cp-f / usr/local/openssh7.9p1/libexec/* / usr/libexec/openssh/

Restorecon / usr/bin/ {scp,sftp,ssh,ssh-add,ssh-agent,ssh-keygen,ssh-keyscan}

Restorecon / usr/sbin/sshd

Restorecon / usr/libexec/openssh/ {sftp-server,ssh-keysign,ssh-pkcs11-helper}

The above code can be placed in a file to automatically perform the upgrade.

Perform after the upgrade is completed, so that root can log in

Echo "PermitRootLogin yes" > > / etc/ssh/sshd_config

If it is already set up

Chkconfig sshd on

However, the sshd service cannot be started automatically after restart, but the service can be started successfully manually, and an error may be reported as follows

[root@rhel6 init.d] # service sshd start

Starting sshd:/usr/sbin/sshd: error while loading shared libraries: libcrypto.so.1.0.0: failed to map segment from shared object: Permission denied

[FAILED]

Need to check

Whether getenforce is Enforcing, open the configuration file config of / etc/selinux, and change SELINUX to disabled. Start the service no longer report an error, restart the system

The sshd service can start automatically.

The above is the editor for you to share how to upgrade openssh7.9, if you happen to have similar doubts, you might as well refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.