解决NTPD漏洞，升级Ntpd版本

解决NTPD漏洞，升级Ntpd版本

关于解决漏洞的问题我就不详说了，主要就是升级版本。

这里我们就直接简单记录下步骤：

1、升级

使用root用户登录系统进入到/home/guankong ,上传ntp-4.2.8p9-1.el6.x86_64.rpm到该目录下

2.安装依赖包

yum install gcc gcc-c++ openssl-devel libstdc++* libcap*

3.备份旧版本的配置文件

 cp -ar /etc/ntp /etc/ntp.bak

 cp /etc/ntp.conf /etc/ntp.conf.bak

 cp /etc/init.d/ntpd /etc/init.d/ntpd.bak

 cp /etc/sysconfig/ntpd /etc/sysconfig/ntpd.bak

 cp /etc/sysconfig/ntpdate /etc/sysconfig/ntpdate.bak

4.卸载旧的NTPD

yum erase ntp ntpdate

5.创建/var/lib/ntp目录

install -v -m710 -o ntp -g ntp -d /var/lib/ntp                //可能存在目录会报错

6.安装rpm包

rpm -i ntp-4.2.8p9-1.el6.x86_64.rpm

7.还原配置文件

cp /etc/init.d/ntpd.bak /etc/init.d/ntpd

cp /etc/sysconfig/ntpd.bak /etc/sysconfig/ntpd

cp /etc/sysconfig/ntpdate.bak /etc/sysconfig/ntpdate

mv /etc/ntp.bak /etc/ntp

cp /etc/ntp.conf.bak /etc/ntp.conf
 

shell脚本命令一键执行：

#!/bin/sh

chmod 755 -R .

install_log=install.log

##ntp upgrade

echo "#######1:ntp upgrade ..." 2>&1 | tee -a $install_log

\cp -ar /etc/ntp /etc/ntp.bak

\cp /etc/ntp.conf /etc/ntp.conf.bak

\cp /etc/init.d/ntpd /etc/init.d/ntpd.bak

\cp /etc/sysconfig/ntpd /etc/sysconfig/ntpd.bak

\cp /etc/sysconfig/ntpdate /etc/sysconfig/ntpdate.bak

yum -y erase ntp ntpdate 2>&1 | tee -a $install_log

rpm -i ntp-4.2.8p9-1.el6.x86_64.rpm 2>&1 | tee -a $install_log

\cp /etc/init.d/ntpd.bak /etc/init.d/ntpd

\cp /etc/sysconfig/ntpd.bak /etc/sysconfig/ntpd

\cp /etc/sysconfig/ntpdate.bak /etc/sysconfig/ntpdate

rm /etc/ntp -rf

mv /etc/ntp.bak /etc/ntp

\cp /etc/ntp.conf.bak /etc/ntp.conf

echo "ntp upgrade end !"   2>&1 | tee -a $install_log

需要文件：ntp-4.2.8p9-1.el6.x86_64.rpm,自行百度下载