/sbin/rc?.d files

[Anu Lanka]

To secure system services, HP-ux security guide talks about removing unwanted files, when building a new Hp-ux system? I want to know what files to remove for HP_UX 11.0 in /sbin/rcS.d, /sbin/rc0.d,
/sbin/rc1.d, /sbin/rc2.d,
/etc/rc3.d, /sbin/rc4.d, /sbin/rc5.d and /sbin/rc6.d directories?

[Sridhar Bhaskarla]

Hi,

It depends on what you do not want. For ex., if you are not using audio, you can delete it's links from rc2.d and rc1.d directories. Few things that are not generally required are gated, named,rdpd etc., unless you use them.

-Sri

[Duncan Edmonstone]

This is the usual document you will get pointed to when asked about this:

http://people.hp.se/stevesk/bastion11.html


Remember that what was right for the author of this docuemnt may not be right for you... some of these services you may want to leave running, and there may be other things thatyou want to stop.

HTH

Duncan

[MANOJ SRIVASTAVA]

Hi Anu

It all depends on how the security is treating it , I dont think there should a requirement to remove these files , directories , by deafult there is no rc5.d , only upto rc4.d and no files under that too . These are files related to start up of the sytem at various levels and ofcourse you have the flexibility to switch it off or on to the service required or installed . I would prefer to ahve more of caution on the passwd , login and access bcoz if some one can break in to these areas then they may as well recreate the files .


Manoj Srivastava

[James R. Ferguson]

Hi:

Rather than removing files (links) in '/sbin/rc*.d/' or files in 'sbin/init.d' (to which the links point), consider turning *off* their control in their corresponding '/etc/rc.config.d' configuration files. Generally this means changing a variable's value from <1> to <0> to defeat the startup of a service.

For more information on the startup/shutdown mechanisms, see here:

http://docs.hp.com/hpux/onlinedocs/os/startup.pdf

Regards!

...JRF...

[Victor_5]

It is really depends on what you need, and what you donot need, I list /sbin/rc2.d for yuor reference, for /sbin/rc3.d and /sbin/rc4.d, same thing.

K100dtlogin.rc
K200tps.rc
K900nfs.server
S006hpfc
S370named
S400nfs.core
S406nisplus.server S408nisplus.client
S410nis.server
S420nis.client
S430nfs.client
S440comsec
S490mrouted
S530rwhed
S540sendmail
S560SnmpMaster
S565SnmpHpunix
S720lp
......