Close unnecessary services in /etc/inetd.conf

  • finger, netstat, sysstat, the tools for hackers
  • # 
    # *****************************************************************
    # *                                                               *
    # *    Copyright (c) Digital Equipment Corporation, 1991, 1995    *
    # *                                                               *
    # *   All Rights Reserved.  Unpublished rights  reserved  under   *
    # *   the copyright laws of the United States.                    *
    # *                                                               *
    # *   The software contained on this media  is  proprietary  to   *
    # *   and  embodies  the  confidential  technology  of  Digital   *
    # *   Equipment Corporation.  Possession, use,  duplication  or   *
    # *   dissemination of the software and media is authorized only  *
    # *   pursuant to a valid written license from Digital Equipment  *
    # *   Corporation.                                                *
    # *                                                               *
    # *   RESTRICTED RIGHTS LEGEND   Use, duplication, or disclosure  *
    # *   by the U.S. Government is subject to restrictions  as  set  *
    # *   forth in Subparagraph (c)(1)(ii)  of  DFARS  252.227-7013,  *
    # *   or  in  FAR 52.227-19, as applicable.                       *
    # *                                                               *
    # *****************************************************************
    #
    # HISTORY
    # 
    # @(#)$RCSfile: inetd.conf,v $ $Revision: 4.1.12.4 $ (DEC) $Date: 1994/01/05 12:07:09 $ 
    # 
    ######################################################################
    #
    # (c) Copyright 1990, OPEN SOFTWARE FOUNDATION, INC.
    # ALL RIGHTS RESERVED
    #
    #
    # OSF/1 Release 1.0
    ######################################################################
    #
    # Internet server configuration database
    #
    # Description:  The inetd.conf file is the file that the inetd daemon reads
    #		for information on how to handle Internet service requests.
    #
    # Syntax:  ServiceName  SocketType  ProtocolName  Wait/NoWait  UserName \
    #           ServerPath  ServerArgs
    #
    # ServiceName     name of an Internet service defined in the /etc/services file
    # SockettType	  type of socket used by the service, either stream or dgram
    # ProtocolName	  name of an internet protocol defined in the /etc/protocols
    #		  file
    # Wait/NoWait	  determines whether the inetd daemon waits for 
    #		  a datagram server to release the socket before continuing
    #		  to listen at the socket
    # UserName	  the login that inetd should use to start the server
    # ServerPath 	  full pathname of the server
    # ServerArgs	  optional command line arguments that inetd should use to
    #		  execute the server
    #
    ftp     stream  tcp     nowait  root	/usr/local/etc/ftpd   ftpd 
    #ftp     stream  tcp     nowait  root	/usr/sbin/ftpd          ftpd 
    telnet  stream  tcp     nowait  root	/usr/sbin/telnetd       telnetd
    #telnet  stream  tcp     nowait  root   /usr/sbin/tcpd     telnetd
    #shell   stream  tcp     nowait  root	/usr/sbin/rshd		rshd
    #login   stream  tcp     nowait  root	/usr/sbin/rlogind	rlogind
    #exec    stream  tcp     nowait  root	/usr/sbin/rexecd        rexecd
    # Run as user "uucp" if you don't want uucpd's wtmp entries.
    #uucp	stream	tcp	nowait	root	/usr/sbin/uucpd		uucpd
    #finger  stream  tcp     nowait  root	/usr/sbin/fingerd       fingerd
    #tftp   dgram   udp     wait    root	/usr/sbin/tftpd         tftpd /tmp
    #comsat  dgram   udp     wait    root	/usr/sbin/comsat        comsat
    #talk    dgram   udp     wait    root	/usr/sbin/talkd         talkd
    #ntalk   dgram   udp     wait    root	/usr/sbin/ntalkd        ntalkd
    #bootps dgram   udp     wait    root	/usr/sbin/bootpd        bootpd
    #time	stream	tcp	nowait	root	internal		time
    #time    dgram   udp     wait    root    internal                time
    #daytime stream	tcp	nowait	root	internal		daytime
    #daytime dgram	udp	wait	root	internal		daytime
    #echo	stream	tcp	nowait	root	internal		echo
    #echo	dgram	udp	wait	root	internal		echo
    #discard stream	tcp	nowait	root	internal		discard
    #discard dgram	udp	wait	root	internal		discard
    #chargen stream	tcp	nowait	root	internal		chargen
    #chargen dgram	udp	wait	root	internal		chargen
    #kdebug  stream  tcp     nowait  root    /usr/sbin/kdebugd       kdebugd
    #cfgmgr  stream  tcp     nowait  root    /sbin/cfgmgr            cfgmgr
    # Rquotad serves UFS disk quotas to NFS clients.
    #
    #rquotad/1       dgram   rpc/udp wait root /usr/sbin/rpc.rquotad  rpc.rquotad
    # Rstatd is used by programs such as perfmeter.
    #
    #rstatd/2-4      dgram   rpc/udp wait root /usr/sbin/rpc.rstatd   rpc.rstatd
    #
    # The rusers service gives out user information.  Sites concerned 
    # with security may choose to disable it. 
    #
    #rusersd/1-2     dgram   rpc/udp wait root /usr/sbin/rpc.rusersd  rpc.rusersd
    #
    # The spray server is used primarily for testing.
    #
    #sprayd/1        dgram   rpc/udp wait root /usr/sbin/rpc.sprayd   rpc.sprayd
    #
    # The rwall server lets anyone on the network bother everyone on your machine.
    #
    #walld/1         dgram   rpc/udp wait root /usr/sbin/rpc.rwalld   rpc.rwalld
    #
    

    Next

    Prev