topic Re: inet services with MC/SG in Operating System - HP-UX

inet services with MC/SG

Eric Guerizec — Fri, 01 Mar 2002 17:24:50 GMT

Hi!

Is there any problem to disable daytime, echo, discard and chargen services on a server running MC/Service Guard? I want to disable them for security reason!
Thanks!

Re: inet services with MC/SG

James R. Ferguson — Fri, 01 Mar 2002 17:29:17 GMT

Hi:

No, there is no problem disabling them.

Regards!

...JRF...

Re: inet services with MC/SG

Jeff Schussele — Fri, 01 Mar 2002 18:32:10 GMT

Hi Eric,

Nope - none that I'm aware of.

Rgds,
Jeff

Re: inet services with MC/SG

melvyn burnard — Fri, 01 Mar 2002 18:34:48 GMT

ServiceGuard makes no use of these facilities, so no problem to disable them.

Re: inet services with MC/SG

Steven Sim Kok Leong — Fri, 01 Mar 2002 22:45:35 GMT

Hi,

MC/ServiceGuard does not make use of such services.

In addition, you should try to use /etc/cmcluster/cmclnodelist instead of the .rhosts file. This allows you to comment out exec, shell, login (if they are not in use by other applications) from your /etc/inetd.conf and disable the r-services (rexecd, remshd, rlogind) on the next inetd reread (inetd -c) of the configuration file.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: inet services with MC/SG

Eric Guerizec — Mon, 04 Mar 2002 09:17:29 GMT

Thanks!