Disable or stop service guard daemon

[chindi]

Hi ,

Recently there was an audit which showed;

s700_800 11.31 Serviceguard A.11.20.00 :

A potential security vulnerability has been identified in HP
Serviceguard. This vulnerability could be remotely exploited to create
a Denial of Service (DoS).

We need to Disable or stop service guard daemon  SINCE WE ARE NOT USING IT .

hp11iv3

ServiceGuard A.11.20.00 Serviceguard SD Product

tcp 0 0 *.auth *.* LISTEN is this responsible for the same ??

P.S. This thread has been moved from HP-UX > System Administration to HP-UX > Serviceguard.
-HP Forum Moderator

[Matti_Kurkela]

No. The service that is running in port 113/tcp (listed as "auth" in /etc/services) is identd.

Identd is part of the basic HP-UX installation: it is not a part of Serviceguard. In HP-UX, identd is typically started by the inetd daemon whenever an IDENT protocol request comes in.

However, Serviceguard will use identd to check the identity of the user when running some Serviceguard commands.

Other applications may use identd too.

If you want to disable Serviceguard without uninstalling it, set the AUTOSTART_CMCLD variable to 0 in /etc/rc.config.d/cmcluster file.

If you want to disable identd, comment out the appropriate line in /etc/inetd.conf:

auth         stream tcp6 wait   bin  /usr/lbin/identd   identd

 Then send a "kill -HUP" to the inetd process to make it re-read the inetd.conf file without rebooting.

[Patrick Wallek]

If you want to make sure Service Guard itself is stopped, do the following:

# /sbin/init.d/cmsluster stop

Then edit the file /etc/rc.config.d/cmcluster and make sure the line AUTOSTART_CMCLD=1 is changed to be AUTOSTART_CMCLD=0 so that ServiceGuard doesn't start automatically.

[Emil Velez_2]

IF you are not using SErviceguard on the system if you want you can swremove ServiceGuard

It got installed as part of the DataCenter or Mission Critical OEs