Close unnecessary services in /etc/inetd.conf
# # ***************************************************************** # * * # * Copyright (c) Digital Equipment Corporation, 1991, 1995 * # * * # * All Rights Reserved. Unpublished rights reserved under * # * the copyright laws of the United States. * # * * # * The software contained on this media is proprietary to * # * and embodies the confidential technology of Digital * # * Equipment Corporation. Possession, use, duplication or * # * dissemination of the software and media is authorized only * # * pursuant to a valid written license from Digital Equipment * # * Corporation. * # * * # * RESTRICTED RIGHTS LEGEND Use, duplication, or disclosure * # * by the U.S. Government is subject to restrictions as set * # * forth in Subparagraph (c)(1)(ii) of DFARS 252.227-7013, * # * or in FAR 52.227-19, as applicable. * # * * # ***************************************************************** # # HISTORY # # @(#)$RCSfile: inetd.conf,v $ $Revision: 4.1.12.4 $ (DEC) $Date: 1994/01/05 12:07:09 $ # ###################################################################### # # (c) Copyright 1990, OPEN SOFTWARE FOUNDATION, INC. # ALL RIGHTS RESERVED # # # OSF/1 Release 1.0 ###################################################################### # # Internet server configuration database # # Description: The inetd.conf file is the file that the inetd daemon reads # for information on how to handle Internet service requests. # # Syntax: ServiceName SocketType ProtocolName Wait/NoWait UserName \ # ServerPath ServerArgs # # ServiceName name of an Internet service defined in the /etc/services file # SockettType type of socket used by the service, either stream or dgram # ProtocolName name of an internet protocol defined in the /etc/protocols # file # Wait/NoWait determines whether the inetd daemon waits for # a datagram server to release the socket before continuing # to listen at the socket # UserName the login that inetd should use to start the server # ServerPath full pathname of the server # ServerArgs optional command line arguments that inetd should use to # execute the server # ftp stream tcp nowait root /usr/local/etc/ftpd ftpd #ftp stream tcp nowait root /usr/sbin/ftpd ftpd telnet stream tcp nowait root /usr/sbin/telnetd telnetd #telnet stream tcp nowait root /usr/sbin/tcpd telnetd #shell stream tcp nowait root /usr/sbin/rshd rshd #login stream tcp nowait root /usr/sbin/rlogind rlogind #exec stream tcp nowait root /usr/sbin/rexecd rexecd # Run as user "uucp" if you don't want uucpd's wtmp entries. #uucp stream tcp nowait root /usr/sbin/uucpd uucpd #finger stream tcp nowait root /usr/sbin/fingerd fingerd #tftp dgram udp wait root /usr/sbin/tftpd tftpd /tmp #comsat dgram udp wait root /usr/sbin/comsat comsat #talk dgram udp wait root /usr/sbin/talkd talkd #ntalk dgram udp wait root /usr/sbin/ntalkd ntalkd #bootps dgram udp wait root /usr/sbin/bootpd bootpd #time stream tcp nowait root internal time #time dgram udp wait root internal time #daytime stream tcp nowait root internal daytime #daytime dgram udp wait root internal daytime #echo stream tcp nowait root internal echo #echo dgram udp wait root internal echo #discard stream tcp nowait root internal discard #discard dgram udp wait root internal discard #chargen stream tcp nowait root internal chargen #chargen dgram udp wait root internal chargen #kdebug stream tcp nowait root /usr/sbin/kdebugd kdebugd #cfgmgr stream tcp nowait root /sbin/cfgmgr cfgmgr # Rquotad serves UFS disk quotas to NFS clients. # #rquotad/1 dgram rpc/udp wait root /usr/sbin/rpc.rquotad rpc.rquotad # Rstatd is used by programs such as perfmeter. # #rstatd/2-4 dgram rpc/udp wait root /usr/sbin/rpc.rstatd rpc.rstatd # # The rusers service gives out user information. Sites concerned # with security may choose to disable it. # #rusersd/1-2 dgram rpc/udp wait root /usr/sbin/rpc.rusersd rpc.rusersd # # The spray server is used primarily for testing. # #sprayd/1 dgram rpc/udp wait root /usr/sbin/rpc.sprayd rpc.sprayd # # The rwall server lets anyone on the network bother everyone on your machine. # #walld/1 dgram rpc/udp wait root /usr/sbin/rpc.rwalld rpc.rwalld #