Proper way of disabling "uucp" ?

[Philip Chan_1]

I'm thinking of commenting out the "uucp" service from /etc/inetd.conf then do a restart on inetd, is this the RIGHT way of doing it?

[federico_3]

It's the right way!!

Federico

[federico_3]

Sorry.... There is no need to restart inetd daemon ; it's sufficient run:

inetd -c ( the option -c force the current to reread /etc/inetc.conf)

federico

[Philip Chan_1]

One of my colleague suggested to block uucp by setting "REQUEST=No" in /usr/lib/uucp/Permissions, don't you think this is necessary assuming such service has already been stopped at the inetd level?

[federico_3]

I think that the most drastic method to disable an incoming service is the comment sign in the inetd.conf file!


federico

[Chris Garman · Accepted solution]

uucp was not invented as a tcp service, though there appears to be such support now via inetd.

The main use of uucp I have seen is for transmission of files over a serial line like a modem.

This connection, be it through inetd or over a serial line begins at the login prompt. A login is made as a user such as uucp. This then runs a uucp IO program that handles the protocol between the two systems.

So to stop this, grep your passwd file for uucp, and disable every account that is uucp related.

If you really want to be sure, delete or make it impossible to execute all the uucp files. swremove is probably the best way to do this.