Startup scripts

[Philip Lunney]

Hi

I am trying to implement security on a HP-UX11 server so I am removing any unnecessary startup scripts from the /sbin/rc*.d directories. Can you someone please tell which scripts I absolutely need to leave in, I have most of them but just in case......

Thanks Barbara.

[John Palmer]

Rather than remove the scripts, have you considered changing the corresponding script in /etc/rc.config.d so that the startup variable is set to 0.

E.g. to stop cron from starting, edit /etc/rc.config.d/cron and change CRON=1 to CRON=0.

Regards,
John

[James R. Ferguson]

Hi Barbara:

The services that you would defeat would be dependent upon your environment. Some recommendations can be found in the "Building a Bastion Host Using HP-UX 11" whitepaper:

http://www.kbeta.com/SecurityTips/Checklists/HPUX_11_Bastion_Guide.htm

However, rather than removing files (links) in '/sbin/rc*.d/' or files in 'sbin/init.d' (to which the links point), consider turning *off* their control in their corresponding '/etc/rc.config.d' configuration files. Generally this means changing a variable's value from <1> to <0> to defeat the startup of a service.

For more information on the startup/shutdown mechanisms, see:

http://docs.hp.com/hpux/onlinedocs/os/startup.pdf

Regards!

...JRF...

[U.SivaKumar_2]

Hi,
You can remove scripts like
( used wild cards )
S*mrouted
S*rwhod
S*gated
S*rbootd
S*audio
S*ospf*
If you are not using NIS then you can remove
S*nis*
Note: please take a copy of these rc* directories before doing anything.

regards,
U.SivaKumar

[RAC_1]

All depends on what is your requirement.

some are as follows-
apache
dns
xsever
nfs-if not required
dtlogin
mwa
omni
etc

Regards,