topic Re: RHEL5: Having 9200 entries in /etc/services, does it post a security threat? in Operating System - Linux

RHEL5: Having 9200 entries in /etc/services, does it post a security threat?

Daniel Simard — Fri, 29 May 2009 14:40:15 GMT

I would like to hear your interpretation of the purpose of the /etc/services file.

Is it a reference point for programs to use protocols and ports only?

Or it is used as a security file, which means if an entry is not in there, the program will not work thus you are "safe".

Would you recommend having the least amount of services in that file to increase security or is it irrelevant?

Please help me understand.

on a side note: any pdf's or links you could give me on how to increase security on red hat system?

Re: RHEL5: Having 9200 entries in /etc/services, does it post a security threat?

Ivan Ferreira — Fri, 29 May 2009 14:43:04 GMT

>>> Is it a reference point for programs to use protocols and ports only?

The /etc/services is basically used, as a translation from ports to names. It's similar to the function provided by /etc/hosts, but for services. It's used for commands like netstat to display the port numbers as names.

>>> Or it is used as a security file,

No.

>>> Would you recommend having the least amount of services in that file to increase security or is it irrelevant?

Is not relevant the number of lines.

Re: RHEL5: Having 9200 entries in /etc/services, does it post a security threat?

Steven E. Protter — Sun, 31 May 2009 19:54:48 GMT

Shalom,

/etc/services is more like a reservations file.

Services declare their intention to use a port and protocol.

Some services won't work without it.

But real security is established by shutting down unneeded services and keeping them from listening.

/etc/services is good to use but some services like Oracle choose not to do so.

SEP