Centos7系统优化服务最小化--系统安全

[root@node1 ~]# cat checkserver.sh 
#by Egrep 10206334
s=`systemctl list-unit-files |awk '{if ($2=="enabled") print $1}'` #取出现在系统启动的服务 
for i in $s
do
systemctl disable $i       #循环关闭所有的服务
done
cat >/tmp/log<< EOF   #需要开启的服务
crond
dbus-org.freedesktop.NetworkManager.service
dbus-org.freedesktop.nm-dispatcher.service
getty@.service
irqbalance.service
NetworkManager-dispatcher.service
NetworkManager.service
rsyslog.service
sshd.service
systemd-readahead-collect.service
systemd-readahead-drop.service
systemd-readahead-replay.service
tuned.service
default.target
multi-user.target
remote-fs.target
EOF

while read line 
do
systemctl enable  $line
done </tmp/log
rm -rf /tmp/log

#read 读取变量 赋值给line