topic stop services in Operating System - HP-UX

stop services

Asif Chaudhary — Mon, 06 Nov 2006 07:38:05 GMT

Hi,

I have new setup and want to do some tasks related to security.

1. I need to stop Apache service on startup.
2. Disabe Crontab for everyone(only few users can use it)
3. No one can ftp by user root.
4. No one can remote login by user root
5. No one can use telnet service
6. Disable Reverse DNS lookup by SSH

Regrds,

AFA

Re: stop services

Calandrello — Mon, 06 Nov 2006 07:50:06 GMT

Friend
1- stop apache :
/sbin/init.d/hpws_apache stop
2- set cron for users :
cron.allow
4- set rlogin :
more .rhosts it writes root after the name or IP of schemes
5-telnet :
/etc/inetd.conf
comment service telnet it restarts the service : inetd -c

Re: stop services

Ivan Krastev — Mon, 06 Nov 2006 07:54:43 GMT

1. Edit /etc/rc.config.d/apacheconf
and change
APACHE_START=1
to
APACHE_START=0

2. Edit /var/adm/cron/cron.allow and list only users permited to use crontab.

3. Add root in /etc/ftpd/ftpusers

4. Add console in /etc/securetty to disable telnet access for root.
Edin /etc/opt/ssh/sshd_config and add

PermitRootLogin no
Reload ssh service.

5. Comment line for telnet in inetd.conf

regards,
ivan

Re: stop services

Steven E. Protter — Mon, 06 Nov 2006 07:59:32 GMT

Shalom,

1.) vi /etc/rc.config.d/hpws_apache
change the first variable to zero.
2.) Already done by default.
3.) Add root the the ftpusers file. Test it, se veral versions of ftp ignored this feature.
4.) already posted correctly to the thread.
5.)vi /etc/inetd.conf comment out telnetd line inetd -k inetd -c
6.) Can't be done. If ssh is installed it can run any nslookup command you desire. You can change permissions on nslookup in order to perven non-root users from using it. Only workable apporach here is by permissions.

SEP