Archive of UserLand's first discussion group, started October 5, 1998.

Re: I did the deed!

Author:Eric Soroos
Posted:5/11/1999; 6:01:43 PM
Topic:Installing RedHat 6.0
Msg #:6053 (In response to 6045)
Prev/Next:6052 / 6054

They are insecure services. The model of trust that they use is based on a secure network. I don't think that they are truly dangerous right now, but they are a great advantage for someone wanting to break into your system.

Lpr would let people print to your printer. The Xwindows port is where xwindows connects to the network to broadcast your screen about.

The two that are most dangerous are probably rlogin and rsh, which allow people to login remotely using a protocol different than telnet. You won't have much use for it, since you only have one unix box.

To get rid of those two, look in your /etc/inetd.conf file and comment out the following lines with a # sign.

shell stream tcp nowait root /usr/sbin/tcpd in.rshd login stream tcp nowait root /usr/sbin/tcpd in.rlogind

save the file, then find the inetd process number using

ps x | grep inetd

You should see two lines, the first number on the line is the process id, the last entry is the name of the process. One will be named inetd, one should be grep inetd.

as root,

kill -HUP (insert process number here)

This tells inetd to reread its config file with the new information.

As for worrying right now? I am the only one in my office who worries about security, it's sort of how I think. (Just because you're paranoid doesn't mean they're not out to get you) These are the sorts of things that I would do to a machine before I let it outside a firewall. But in all likelyhood you could leave this machine up for a month and not have anyone try to break it. But why make their jobs easier? At least do it in the near future.

eric

There are responses to this message:

This page was archived on 6/13/2001; 4:50:03 PM.

© Copyright 1998-2001 UserLand Software, Inc.