Bastille question

[Stephen Milner]

Hi i have a system set-up (HP ux 11iv2 on Itanium) that we have hardened using the HP bastille tool.

I have used this to disable a number of services on the system. I can see that these services have now been hashed out of /etc/inetd.conf but i see the entries are still in /etc/services.

Do i need to manually comment these out as well or should the bastille tool have done this ?

[James R. Ferguson · Accepted solution]

Hi Stephen:

You don't need (nor really want) to do anything to '/etc/services'. The entities in '/etc/services' are simply mappings of numbers and names and the declartion of a service's protocol. The 'inetd' daemon (via its configuration file) is the controller of whether or not the daemons run.

Regards!

...JRF...

[Stephen Milner]

James

Thanks I was hoping that was the answer. We just had one of our security guys point out all the entries were still in /etc/services. But if they can't run if the entries in /etc/inetd.conf are disabled i don't have a problem.

Thanks for the quick response.

Cheers

Stephen