LInux升级OpenSSH脚本

#!/bin/bash

echo backup sshd_config to /etc/ssh/sshd_config.bak 

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

echo backup sshd to /etc/pam.d/sshd.bak

cp /etc/pam.d/sshd /etc/pam.d/sshd.bak

if [ !-z openssh.zip ];then
    echo "not found openssh.zip"
    exit 1
fi

echo unzip package...

unzip openssh.zip

cd openssh

echo installing openssh...

rpm -Uvh *.rpm

chmod 600 /etc/ssh/ssh_host_rsa_key

chmod 600 /etc/ssh/ssh_host_ecdsa_key

chmod 600 /etc/ssh/ssh_host_ed25519_key

echo backup now sshd_config....

mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak1

echo recover sshd_config....

mv /etc/ssh/sshd_config.bak /etc/ssh/sshd_config

echo modify sshd

cat > /etc/pam.d/sshd <<EOF
 #%PAM-1.0
 auth       required     pam_sepermit.so
 auth       include      password-auth
 account    required     pam_nologin.so
 account    include      password-auth
 password   include      password-auth
 # pam_selinux.so close should be the first session rule
 session    required     pam_selinux.so close
 session    required     pam_loginuid.so
 # pam_selinux.so open should only be followed by sessions to be executed in the user context
 session    required     pam_selinux.so open env_params
 session    optional     pam_keyinit.so force revoke
 session    include      password-auth
EOF

echo modify sshd_config...

sed -i -e "s/#PermitRootLogin yes/PermitRootLogin yes/g" /etc/ssh/sshd_config
sed -i -e "s/#PasswordAuthentication yes/PasswordAuthentication yes/g" /etc/ssh/sshd_config

systemctl restart sshd

echo upgrade complete!