YMLib Systems Librarian

一些設定的記錄

我的相片
名稱:
位置: WuGu, Taipei, Taiwan

我是個大光頭,因我的頭型適合這一型。I have a perfect head style.

星期四, 9月 14, 2006

停掉solaris 10的不必要服務

Harden Solaris 10
Created by cclausen. Last edited by cclausen

# Setting up sendmail on Solaris 10
# set LOG_FROM_REMOTE=NO in /etc/default/syslogd
# disable unneeded services
svcadm disable mpxio-upgrade keyserv nisplus nis/client ldap/client nfs/cbd
svcadm disable nfs/mapid inetd-upgrade print/server dns/server
svcadm disable bootparams kadmin krb5kdc nfs/server rarp ipfilter slp consadm
svcadm disable zones rcap gss ocfserv rex rstat rusers spray wall
svcadm disable tname telnet apocd/udp chargen:dgram chargen:stream
svcadm disable daytime:dgram daytime:stream discard:dgram discard:stream
svcadm disable echo:dgram echo:stream ftp time:dgram time:stream
svcadm disable comsat finger login:klogin login:eklogin login:rlogin
svcadm disable rexec shell:kshell shell:default talk rpc_ticotsord smserver mdcomm
svcadm disable meta metamed metamh print/rfc1179 xfs nlockmgr bind
svcadm disable pfil print/cleanup fc-fabric autofs
svcadm enable -r console-login