Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Sep 2001 01:47:51 -0700
From:      "Crist J. Clark" <cristjc@earthlink.net>
To:        cyu0635@hotmail.com
Cc:        "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: security .rhost, .rexec
Message-ID:  <20010928014751.I330@blossom.cjclark.org>
In-Reply-To: <3BB3D440.280017F9@hotmail.com>; from cyu0635@hotmail.com on Thu, Sep 27, 2001 at 09:37:04PM -0400
References:  <3BB3D440.280017F9@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 27, 2001 at 09:37:04PM -0400, cyu0635@hotmail.com wrote:
> Hi all
> 
> I read a book what is the secruity and prevent the following services in
> the system
> 
> .rhosts
> rexec
> and
> rlogin
> 
> but don't teach how to do it.
> So please teach me

Disable the r-protocols in /etc/inetd.conf,

  #shell  stream  tcp     nowait  root    /usr/libexec/rshd       rshd
  #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
  #login  stream  tcp     nowait  root    /usr/libexec/rlogind    rlogind
  #login  stream  tcp6    nowait  root    /usr/libexec/rlogind    rlogind
  #exec   stream  tcp     nowait  root    /usr/libexec/rexecd     rexecd

(They are probably disabled on your system by default.) Or do not run
inetd(8) at all by placing,

  inetd_enable="NO"

In /etc/rc.conf.
-- 
Crist J. Clark                           cjclark@alum.mit.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010928014751.I330>