Inetd.conf Guidelines

Inetd.conf is a configuration file that tells inetd which daemons to start while the system is running. Many of the services that run by default present unnecessary security risks. Instead of running inetd wide open, comment out services that you don't use by placing a pound sign (#) at the beginning of the line.

The following services are good candidates for commenting out.

• ftp (in.ftpd - ftp server)
• telnet (in.telnetd - telnet server) (use alternatives that offer encryption, such as ssh)
• shell (in.rshd - remote shell server)
• login (in.rlogind - rlogin server)
• exec (in.rexecd - rexec server)
• comsat (in.comsat - biff server)
• talk (in.talkd - talk server)
• uucp (in.uucpd - uucp daemon)
• tftp (in.tftpd - Trivial ftp server)
• finger (in.fingerd - finger server)
• systat
• netstat
• echo
• discard
• daytime
• chargen
• 100232 (sadmind - Solstice system and network administration class agent server - if you must use this, consider using the -S 2 switch to increase security)
• rquotad (UFS disk quota server for NFS clients)
• rusersd (rpc.rusersd - rusers service)
• sprayd (rpc.sprayd - spray server)
• walld (rpc.rwalld - rwall server)
• rstatd (rpc.rstatd - rstatd is used by perfmeter)
• rexd (rpc.rexd)
• 100083 (rpc.ttdbserverd - Sun ToolTalk Database Server)
• ufsd (ufsd - UFS-aware service daemon)
• 100221 (kcms_server - Sun KCMS Profile Server)
• 100235 (cachefsd - CacheFS Daemon)
• 100134 (ktkt_warnd - Kerberos V5 Warning Message Daemon)
• 100234 (gssd - GSS Daemon)
• 100146 (amiserv - AMI Daemon)
• dtspc (dtspcd - Desktop Subprocess Control Service Daemon)
• 100068 (rpc.cmsd - Sun Calendar Manager Server)