Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/inetd.conf

45 lines
2.1 KiB
Plaintext
Raw Normal View History

turn off internal udp services, and log rshd connections; ideas from openbsd.
1996-12-29 06:32:44 +03:00
# $NetBSD: inetd.conf,v 1.16 1996/12/29 03:32:44 mrg Exp $
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
# Internet server configuration database
#
# @(#)inetd.conf 5.4 (Berkeley) 6/30/90
#
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
telnet stream tcp nowait root /usr/libexec/telnetd telnetd
turn off internal udp services, and log rshd connections; ideas from openbsd.
1996-12-29 06:32:44 +03:00
shell stream tcp nowait root /usr/libexec/rshd rshd -L
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
login stream tcp nowait root /usr/libexec/rlogind rlogind
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
#nntp stream tcp nowait usenet /usr/libexec/nntpd nntpd
finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
Turn off idented by default.
1995-06-11 00:33:05 +04:00
#ident stream tcp wait nobody.kmem /usr/libexec/identd identd -w -t60 -l -o -e -N
The tftpd daemon has been changed to use setgid() & setuid() to explicitly set the user and group IDs to non-priveleged values. This was done because the chroot() call used when the secure (-s) option is used can only be done by the superuser. This change now requires tftpd to be executed by root. So the inetd.conf entry has been changed to start it that way. I also added -s /tftpboot arguments, so people who uncomment the tftpd entry without realizing it's security ramifications won't open thier whole systems to unauthorized access.
1995-06-05 00:55:39 +04:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
comsat dgram udp wait root /usr/libexec/comsat comsat
ntalk dgram udp wait root /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 21:47:55 +04:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
Add entries to start rpc services.
1993-06-11 04:38:48 +04:00
# Internal services
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
echo stream tcp nowait root internal
discard stream tcp nowait root internal
chargen stream tcp nowait root internal
daytime stream tcp nowait root internal
time stream tcp nowait root internal
turn off internal udp services, and log rshd connections; ideas from openbsd.
1996-12-29 06:32:44 +03:00
#echo dgram udp wait root internal
#discard dgram udp wait root internal
#chargen dgram udp wait root internal
#daytime dgram udp wait root internal
#time dgram udp wait root internal
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
# Kerberos authenticated services
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 18:12:39 +03:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
# Services run ONLY on the Kerberos server
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#krbupdate stream tcp nowait root /usr/libexec/registerd registerd
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#kpasswd stream tcp nowait root /usr/libexec/kpasswdd kpasswdd
Add entries to start rpc services.
1993-06-11 04:38:48 +04:00
# RPC based services
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#mountd/1 dgram rpc/udp wait root /sbin/mountd mountd
Add entries to start rpc services.
1993-06-11 04:38:48 +04:00
rstatd/1-3 dgram rpc/udp wait root /usr/libexec/rpc.rstatd rpc.rstatd
listen for rusers/2-3; no more version 1
1993-11-21 22:02:03 +03:00
rusersd/2-3 dgram rpc/udp wait root /usr/libexec/rpc.rusersd rpc.rusersd
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
walld/1 dgram rpc/udp wait root /usr/libexec/rpc.rwalld rpc.rwalld
sprayd & rquotad: disabled by default
1994-06-24 11:46:19 +04:00
#sprayd/1 dgram rpc/udp wait root /usr/libexec/rpc.sprayd rpc.sprayd
#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad