Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/inetd.conf

59 lines
2.3 KiB
Plaintext
Raw Normal View History

make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
# $NetBSD: inetd.conf,v 1.22 1997/10/07 12:45:32 mrg Exp $
initial import of 386bsd-0.1 sources
1993-03-21 09:45:37 +00:00
#
# Internet server configuration database
#
cleanup Lite-1 merge
1997-02-15 10:02:07 +00:00
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
initial import of 386bsd-0.1 sources
1993-03-21 09:45:37 +00:00
#
cleanup Lite-1 merge
1997-02-15 10:02:07 +00:00
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
it is clear that mountd started from inetd does not work
1993-09-01 09:43:09 +00:00
telnet stream tcp nowait root /usr/libexec/telnetd telnetd
turn off internal udp services, and log rshd connections; ideas from openbsd.
1996-12-29 03:32:44 +00:00
shell stream tcp nowait root /usr/libexec/rshd rshd -L
it is clear that mountd started from inetd does not work
1993-09-01 09:43:09 +00:00
login stream tcp nowait root /usr/libexec/rlogind rlogind
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
#nntp stream tcp nowait usenet /usr/libexec/nntpd nntpd
finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
Turn off idented by default.
1995-06-10 20:33:05 +00:00
#ident stream tcp wait nobody.kmem /usr/libexec/identd identd -w -t60 -l -o -e -N
The tftpd daemon has been changed to use setgid() & setuid() to explicitly set the user and group IDs to non-priveleged values. This was done because the chroot() call used when the secure (-s) option is used can only be done by the superuser. This change now requires tftpd to be executed by root. So the inetd.conf entry has been changed to start it that way. I also added -s /tftpboot arguments, so people who uncomment the tftpd entry without realizing it's security ramifications won't open thier whole systems to unauthorized access.
1995-06-04 20:55:39 +00:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot
it is clear that mountd started from inetd does not work
1993-09-01 09:43:09 +00:00
comsat dgram udp wait root /usr/libexec/comsat comsat
Run ntalkd as nobody.tty
1997-06-29 19:20:20 +00:00
ntalk dgram udp wait nobody.tty /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 17:47:55 +00:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#
# Games
#
add hunt(6) entry (commented by default)
1997-10-04 09:16:00 +00:00
#hunt dgram udp wait nobody /usr/games/huntd huntd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#
# Internal services
#
cleanup Lite-1 merge
1997-02-15 10:02:07 +00:00
#tcpmux stream tcp nowait root internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#echo stream tcp nowait nobody internal
#discard stream tcp nowait nobody internal
#chargen stream tcp nowait nobody internal
daytime stream tcp nowait nobody internal
time stream tcp nowait nobody internal
#echo dgram udp wait nobody internal
#discard dgram udp wait nobody internal
#chargen dgram udp wait nobody internal
#daytime dgram udp wait nobody internal
#time dgram udp wait nobody internal
cleanup Lite-1 merge
1997-02-15 10:02:07 +00:00
#qotd stream tcp nowait nobody /usr/games/fortune fortune
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#
# Kerberos authenticated services
#
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 15:12:39 +00:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#
# Services run ONLY on the Kerberos server
#
it is clear that mountd started from inetd does not work
1993-09-01 09:43:09 +00:00
#krbupdate stream tcp nowait root /usr/libexec/registerd registerd
initial import of 386bsd-0.1 sources
1993-03-21 09:45:37 +00:00
#kpasswd stream tcp nowait root /usr/libexec/kpasswdd kpasswdd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
#
# RPC based services
#
mountd was moved to /usr/sbin ; pointed out by Thorsten Frueauf.
1997-04-03 11:00:16 +00:00
#mountd/1 dgram rpc/udp wait root /usr/sbin/mountd mountd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
rstatd/1-3 dgram rpc/udp wait nobody.kmem /usr/libexec/rpc.rstatd rpc.rstatd
rusersd/2-3 dgram rpc/udp wait nobody /usr/libexec/rpc.rusersd rpc.rusersd
walld/1 dgram rpc/udp wait nobody.tty /usr/libexec/rpc.rwalld rpc.rwalld
#sprayd/1 dgram rpc/udp wait nobody /usr/libexec/rpc.sprayd rpc.sprayd
sprayd & rquotad: disabled by default
1994-06-24 07:46:19 +00:00
#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad
Reference in New Issue Copy Permalink