topic Re: inetd.conf in Operating System - HP-UX

inetd.conf

midham — Thu, 16 Sep 2004 02:09:29 GMT

Hi,

Base on our audit finding report, they ask me to disabled the following services:

1) tftp
2) login
3) shell
4) exec
5) daytime
6) time
7) discard
8) chargen

FYI we are using HPUX 11.0 and my questions are can/how do I disabled all those services? and does it affect our system?

Thanks a lot.

Re: inetd.conf

KCS_1 — Thu, 16 Sep 2004 02:16:09 GMT

Hi,

why don't you have a look at the man page of inetd.conf and inetd??

which will give you more detail

# man inetd.conf

Re: inetd.conf

Sridhar Bhaskarla — Thu, 16 Sep 2004 02:16:45 GMT

Hi,

The answer is it depends. 2,3 and 4 are basically for r-commands. If your application does any kind of 'remsh|rlogin|rexec|rcp' type of stuff, then you may not want to disable them depending on the type of service. 5,6,7 and 8 can be turned off. They won't need the OS to perform and I do not believe they will be used by any OS. 'tftp' is trivial ftp. If your sysetm is acting as a tftp server (for ex., keeps the firmware|configuration etc., for routers etc.,), and if it is an ignite server then you need it. Otherwise, you can turn it off.

Simply edit /etc/inetd.conf file, comment them out and run 'inetd -c' to re-read the configuration. You should see 'deleted service' messages in /var/adm/syslog/syslog.log

-Sri

Re: inetd.conf

Sunil Sharma_1 — Thu, 16 Sep 2004 02:19:29 GMT

Hi,

All these services can be disabled.
Just hash(#) the corresponding entry in /etc/inetd.conf file.

make sure no application/user uses these services before disabling services.

Sunil

Re: inetd.conf

Muthukumar_5 — Thu, 16 Sep 2004 02:22:18 GMT

Try to comments the services on /etc/services and as well as /etc/inetd.conf file.

( comment with in start with # )

Reconfigure the setup of inetd as,

inetd -c

Re: inetd.conf

T G Manikandan — Thu, 16 Sep 2004 02:22:49 GMT

Yes,you can disable them if you are hardening your OS.

Just commecnt the lines in the /etc/inetd.conf and then do a

#/usr/sbin/inetd -c

Re: inetd.conf

midham — Thu, 16 Sep 2004 03:08:36 GMT

Thanks for everyone who reply the message