OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Disabling services
From: Jerry Litteer (gllMORAN.INEL.GOV)
Date: Thu Jul 13 2000 - 10:40:44 CDT

statd and nlockmgr are part of NFS. You can disable statd by commenting out
the rcp.statd line in you /etc/inetd.conf file. NLOCKMGR is kill by not running
NFS / automounter.

If the box your are hardening is an 'external' box, you don't want the be
running nfs/rtp.statd anyway---BIG VULNERABILITY (ROOT HACKS).

> Approved-By: jrauchSECURITYFOCUS.COM
> Delivered-To: focus-linuxlists.securityfocus.com
> Delivered-To: FOCUS-LINUXSECURITYFOCUS.COM
> X-Originating-IP: [64.6.192.74]
> Mime-Version: 1.0
> Date: Thu, 13 Jul 2000 08:01:50 CST
> From: Devlon Duthie <that_duthie_guyHOTMAIL.COM>
> Subject: Disabling services
> X-To: linux-listssc.com
> To: FOCUS-LINUXSECURITYFOCUS.COM
>
> After running Nessus, I have been trying to disable certain services. I
> have been able to trim them all away but am having a devil of a time with a
> couple. I've grep'd for strings, port numbers, commented out stuff and
> still cannot disable: STATD and NLOCKMGR.
>
> Any hints/incantatations would be greatly appreciated!
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

------------------------------------------------------------------
Jerry Litteer
Technical Support e-mail: gllinel.gov
POB 1625 M.S. 3640 Phone: (208) 526-9117
Idaho Falls, Id. 83415-3640 FAX: (208) 526-2641
------------------------------------------------------------------
Best file compression around: "DEL *.*" => 100% compression!!