监控

确保一些性能查看和系统监控的软件已经安装

例如：sysstat、iotop、vmstat、netstat、zabbix-agent

重启

最后为了让所有配置生效，也为了检查重启后所有服务如期启动，得重启一次

命令汇总

• uname -a
• lsb_release
• cat /etc/issue
• cat /etc/sysconfig/network-scripts/ifcfg-eth1
• ping www.baidu.com
• cat /etc/hosts
• cat /etc/networks
• yum update
• cp /etc/ntp.conf /etc/ntp.conf.bak.160329
• vim /etc/ntp.conf
• ntpdate ntp-server
• chkconfig ntpd on
• /etc/init.d/ntpd start
• chkconfig --list | grep ntp
• passwd
• vim /etc/ssh/sshd_config
• grep RootLogin /etc/ssh/sshd_config
• useradd saops
• passwd saops
• visudo
• chkconfig --list | grep ipta
• iptables -L -nv
• getenforce
• vim /etc/sysconfig/selinux
• grep SELINUX /etc/sysconfig/selinux
• setenforce 0
• getenforce
• sestatus -v
• ssh-keygen -t rsa
• vim authorized_keys
• chmod 600 authorized_keys
• cat /etc/fstab
• cat /proc/sys/fs/file-max
• cat /proc/sys/fs/file-nr
• vim /etc/security/limits.conf
• su - root
• ulimit -n
• tail -n 4 /etc/security/limits.conf
• rpm -qa | grep epel
• yum list all | grep "^epel"
• yum install epel-release.noarch
• ll /etc/yum.repos.d/
• rpm -ql epel-release-6-8.noarch
• yum list all | grep -i denyhost
• yum install denyhosts.noarch
• /etc/init.d/denyhosts start
• ps faux | grep denyho
• chkconfig denyhosts on
• chkconfig --list | grep deny

原文地址