CentOS 7.x通过rpm升级OpenSSH到 8.5p1版本

注意：如果机器做过安全基线整改，建议先自行备份/etc/pam.d/sshd文件，升级后，此文件会被覆盖

```bash
#备份
mkdir  /root/upopenssh
cp /etc/ssh/sshd_config /root/upopenssh
cp  /etc/pam.d/sshd /root/upopenssh/

#下载安装
cd  /root/upopenssh/
wget https://cikeblog.com/s/openssh-8.5p1-1.el7.tar.gz
tar -zxvf openssh-8.5p1-1.el7.tar.gz
#yum install ./*.rpm -y
#yum update ./*.rpm -y
rpm -Uvh *.rpm

#更新权限
chmod 0600 /etc/ssh/ssh_host_ed25519_key
chmod 0600 /etc/ssh/ssh_host_rsa_key
chmod 0600 /etc/ssh/ssh_host_ecdsa_key

#还原配置
mv  /etc/pam.d/sshd /root/upopenssh/sshd_bak_20220420
cp   /root/upopenssh/sshd /etc/pam.d/sshd
mv  /etc/ssh/sshd_config  /root/upopenssh/sshd_config_bak.20220420
cp  /root/upopenssh/sshd_config  /etc/ssh/sshd_config

#手动添加配置
#在ssh8.5版本中，如参数PermitRootLogin无显性配置，则默认为：without-passwd
echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
echo "PasswordAuthentication yes"  >> /etc/ssh/sshd_config

#重启服务
systemctl restart sshd
```

上述下载链接失效后，可从附件下载：

[【附件】openssh-8.5p1-1.el7.tar.gz](/media/attachment/2022/07/openssh-8.5p1-1.el7.tar.gz)

[引用1] "Centos7下rpm升级OpenSSH到openssh-8.5p1版本"
https://cikeblog.com/centos7-rpm-upgrade-openssh-to-openssh-8-5-p1-version.html