Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/inetd.conf

67 lines
2.6 KiB
Plaintext
Raw Normal View History

Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
# $NetBSD: inetd.conf,v 1.28 1999/10/06 21:55:54 ad Exp $
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
# Internet server configuration database
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
telnet stream tcp nowait root /usr/libexec/telnetd telnetd
turn off internal udp services, and log rshd connections; ideas from openbsd.
1996-12-29 06:32:44 +03:00
shell stream tcp nowait root /usr/libexec/rshd rshd -L
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
login stream tcp nowait root /usr/libexec/rlogind rlogind
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
#nntp stream tcp nowait usenet /usr/libexec/nntpd nntpd
finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
#ident stream tcp nowait nobody:kmem /usr/libexec/identd identd -l -o -e -N
The tftpd daemon has been changed to use setgid() & setuid() to explicitly set the user and group IDs to non-priveleged values. This was done because the chroot() call used when the secure (-s) option is used can only be done by the superuser. This change now requires tftpd to be executed by root. So the inetd.conf entry has been changed to start it that way. I also added -s /tftpboot arguments, so people who uncomment the tftpd entry without realizing it's security ramifications won't open thier whole systems to unauthorized access.
1995-06-05 00:55:39 +04:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
comsat dgram udp wait root /usr/libexec/comsat comsat
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
ntalk dgram udp wait nobody:tty /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 21:47:55 +04:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Games
#
add hunt(6) entry (commented by default)
1997-10-04 13:16:00 +04:00
#hunt dgram udp wait nobody /usr/games/huntd huntd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Internal services
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#tcpmux stream tcp nowait root internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo stream tcp nowait nobody internal
#discard stream tcp nowait nobody internal
#chargen stream tcp nowait nobody internal
daytime stream tcp nowait nobody internal
time stream tcp nowait nobody internal
#echo dgram udp wait nobody internal
#discard dgram udp wait nobody internal
#chargen dgram udp wait nobody internal
#daytime dgram udp wait nobody internal
#time dgram udp wait nobody internal
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#qotd stream tcp nowait nobody /usr/games/fortune fortune
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Kerberos authenticated services
#
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 18:12:39 +03:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Services run ONLY on the Kerberos server
#
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#krbupdate stream tcp nowait root /usr/libexec/registerd registerd
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#kpasswd stream tcp nowait root /usr/libexec/kpasswdd kpasswdd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# RPC based services
#
mountd was moved to /usr/sbin ; pointed out by Thorsten Frueauf.
1997-04-03 15:00:16 +04:00
#mountd/1 dgram rpc/udp wait root /usr/sbin/mountd mountd
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
rstatd/1-3 dgram rpc/udp wait nobody:kmem /usr/libexec/rpc.rstatd rpc.rstatd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
rusersd/2-3 dgram rpc/udp wait nobody /usr/libexec/rpc.rusersd rpc.rusersd
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
walld/1 dgram rpc/udp wait nobody:tty /usr/libexec/rpc.rwalld rpc.rwalld
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#sprayd/1 dgram rpc/udp wait nobody /usr/libexec/rpc.sprayd rpc.sprayd
sprayd & rquotad: disabled by default
1994-06-24 11:46:19 +04:00
#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad
provide sample lines for IPv6 services (at this moment ftpd and fingerd)
1999-07-02 10:05:21 +04:00
#
# IPv6 services.
# The only difference with the above is "tcp6" instead of "tcp".
#
GENERIC kernel does not ship with IPv6, so comment out tcp6/udp6 entries.
1999-10-05 14:44:28 +04:00
#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd
#finger stream tcp6 nowait nobody /usr/libexec/fingerd fingerd
IPv6 support.
1999-07-13 00:17:09 +04:00
#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -s /tftpboot