Disable dced and rpc?

[Jason Martens]

I am locking down a web server running 11.11, and I was wondering what the side effects/how to disable dced and rpc are. I have already run Bastille, and disabled most of the system services but I still have the following services open and I'm not sure what they are:

111/tcp sunrpc
135/tcp loc-srv
1402/tcp prm-sm-np
1508/tcp diagmond
1720/tcp H.323/Q.931

NOTE: the service names are the best guesses by nmap.

I have also run lsof, but I'm not totally sure how to track down the services those ports relate to.

Thanks for your help!
Jason

[John Bolene]

Not a good thing.

Without either dced or rpc running, there are many processes that cannot start.

[Tyler Easterling · Accepted solution]

Hi Jason,

The effects of disabling DCE/RPC are not fully qualified but off hand I know that SD depends on RPC in one form or another.

diagmond is off course the diagnostics daemon and can be configured to listen to the loopback only,
/usr/bin/touch /var/stm/config/sys/local_only

Not sure which version made this available but if all else fails just download the latest from software depot.

I'll look into the others, don't know off the top of my head.

Tyler Easterling