Ahimsa
07-09-2002, 01:00 PM
Hello all
In the interests of securing my stand-alone RH7.2 workstation, using only a dial-up to get mail, news, and web access, I have shut down several services, and wish to invite those who care to to comment on the wisdom from a security perspective of having shut these services down (and singlespeed if you're reading this, this step is to suffice until I get the book :)).
Services stopped: [amd, chargen, chargen-udp, daytime, daytime-udp, echo, echo-udp, imap, imaps, innd, ipop2, kdcrotate, linuxconf-web, mysqld, netfs, network, nscd, ntpd, pop3S, portmap, rhnsd, sendmail, snmpd, squid, time].
Services retained: [anacron, apmd, atd, autofs, crond, gpm, ipchains, ipop3, iptables, junkbuster, keytable, kudzu, linuxconf, lpd, named, random, rawdevices, sgi_fam, syslog, time-udp, wine, xinetd].
If a service is not on either of these two lists then I must conclude that it wasn't installed, because these lists are drawn from 'serviceconf' @ root.
I was unsure about disabling the mysqld, because I will be wanting to use that in the not-too-distant future, but understood that to be a server that might allow remote calls to be made to it on specific ports at which it listens (did I get that right?). It was that that made me decide to switch it off.
Anyway, I'd appreciate any comments on this service choice from a security perspective. As for iptables and ipchains, and configuring Bastille, etc., well, one step at a time: there are only so many hours in a day that I can read for !!! :D
Thanks
In the interests of securing my stand-alone RH7.2 workstation, using only a dial-up to get mail, news, and web access, I have shut down several services, and wish to invite those who care to to comment on the wisdom from a security perspective of having shut these services down (and singlespeed if you're reading this, this step is to suffice until I get the book :)).
Services stopped: [amd, chargen, chargen-udp, daytime, daytime-udp, echo, echo-udp, imap, imaps, innd, ipop2, kdcrotate, linuxconf-web, mysqld, netfs, network, nscd, ntpd, pop3S, portmap, rhnsd, sendmail, snmpd, squid, time].
Services retained: [anacron, apmd, atd, autofs, crond, gpm, ipchains, ipop3, iptables, junkbuster, keytable, kudzu, linuxconf, lpd, named, random, rawdevices, sgi_fam, syslog, time-udp, wine, xinetd].
If a service is not on either of these two lists then I must conclude that it wasn't installed, because these lists are drawn from 'serviceconf' @ root.
I was unsure about disabling the mysqld, because I will be wanting to use that in the not-too-distant future, but understood that to be a server that might allow remote calls to be made to it on specific ports at which it listens (did I get that right?). It was that that made me decide to switch it off.
Anyway, I'd appreciate any comments on this service choice from a security perspective. As for iptables and ipchains, and configuring Bastille, etc., well, one step at a time: there are only so many hours in a day that I can read for !!! :D
Thanks