Turning off services

[Robert Campbell]

We are trying to turn off as many services as possible in order to tighten security on our system. We are down to just a remaining few but not quite sure how to turn off or what the impact is in doing so. The services in question are:

X11 Server
X11 Font Server
instal_boots
instal_bootc

We are not using X windows. I tried to determine what initiates or starts this service but was unsuccessful. In my research I found that instal_boots and instal_bootc seems to be connected with Ignite. We use ignite only to create a recovery tape and do use ignite to start up any remote systems. If we ever have to rebuild using an ignite tape it would be onsite. Again I was unable to determine if these services are needed for what we do in ignite and subsequently how are they shut off. Appreciate any help or ideas.

[Victor BERRIDGE]

Hi,
You can always go and look in the different init levels like /sbin/rc2.d and /sbin/rc3.d
to see what is started/stopped and when and remove the ones you dont want...

Just thoughts

All the best
Victor

[James R. Ferguson]

Hi:

See: '/etc/rc.config.d/xfs' to control the X font server on port 7000.

If you are only using Ignite 'make_tape_recovery' then you should be able to disable the services so noted.

Regards!

...JRF...

[Tony Contratto]

Hi Robert,

X11 Server: to stop dtlogin from starting at boot, edit /etc/rc.config.d/desktop and change the DESKTOP variable to be "DESKTOP=" instead of "DESKTOP=CDE"

X11 Font Server: to stop xfs from starting at boot, edit /etc/rc.config.d/xfs and change the RUN_X_FONT_SERVER variable to 0.

--
Tony

[Victor BERRIDGE]

look at /etc/rc.log
And start meditating from there for what you need/want and what is to be removed...

All the best
Victor

[Bill Douglass · Accepted solution]

X11 Server:
In /sbin/rc3.d, rename or delete S990dtlogin to disable the XServer.

X11 Font Server:
In /etc/rc.config.d/xfs, set

RUN_X_FONT_SERVER=0

instal_boots
In /etc/inetd.conf, comment out the line that starts

instl_boots

You do not neet the boots or bootc if you are not running an ignite server.


I also recommend installing lsof and using it in conjunction with netstat -a -f inet to determine what ports are open on your system.

netstat -a -f inet will show you what ports are listening, and lsof -i :xxxxx (where xxxxx is teh port nimber) will tell you what process has those ports open.

lsof -i will show you all processes that have an open tcp or udp port.