Disable R-services

[Innopath Support]

Hi,

I need to disable R-services from hpux system in a way that will be relatively easy to restore if required.

My procedure is a follow:
###############################
vi /etc/inetd.conf

comment out
#login stream tcp nowait root /usr/lbin/rlogind rlogind
#shell stream tcp nowait root /usr/lbin/remshd remshd
#kshell stream tcp nowait root /usr/lbin/remshd remshd -K
#klogin stream tcp nowait root /usr/lbin/rlogind rlogind -K

Save the file

restart the inet daemon.

/etc/inetd -c

#################################

after this I did some testing and it seems to work because I am not able to do rlogin, remsh and rcp.
Do I need to remove .rhosts files?
A person recommened to comment out login from /etc/services, is this required?
Is there any other configuration change I need to do?


Thanks,

Hector,

[Patrick Wallek · Accepted solution]

You could comment out the login line in /etc/services but it is not required.

The steps you have taken already are all you need to do. No other configuration files need to be touched.

You could remove all ~/.rhosts and /etc/hosts.equiv files, but without the services enabled they won't do you much good.

[Innopath Support]

Thanks Patrick,

your response is very valuable, My customer's security policy requires to disable the r-services on the other hand I want to keep it simple because I will need to re-enable those services for future oracle upgrades and I think this approach is the one that best fits my requirements.

Regards,

[Pete Randall]

As Patrick says, it's not necessary to do anything else, but for consistency's sake and to avoid confusion later on, I would remove all the .rhosts and /etc/hosts.equiv files, as well as commenting login from /etc/services. It's just cleaner, more thorough, even if it's not necessary.


Pete

[dirk dierickx]

you should delete those rhost files, in certain cases ssh can also make use of these files.