Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/inetd.conf

87 lines
3.8 KiB
Plaintext
Raw Normal View History

Add httpd to the build. Add _httpd to passwd and groups and postinstall. Add /var/www to mtree, add example line to inetd.conf.
2007-10-16 06:47:12 +04:00
# $NetBSD: inetd.conf,v 1.58 2007/10/16 02:47:14 tls Exp $
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
# Internet server configuration database
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
Add httpd to the build. Add _httpd to passwd and groups and postinstall. Add /var/www to mtree, add example line to inetd.conf.
2007-10-16 06:47:12 +04:00
#http stream tcp nowait:600 _httpd /usr/libexec/httpd httpd /var/www
#http stream tcp6 nowait:600 _httpd /usr/libexec/httpd httpd /var/www
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
Add -a valid for PAM.
2005-02-28 05:35:55 +03:00
#telnet stream tcp nowait root /usr/libexec/telnetd telnetd -a valid
#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd -a valid
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#shell stream tcp nowait root /usr/libexec/rshd rshd -L
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#shell stream tcp6 nowait root /usr/libexec/rshd rshd -L
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#login stream tcp nowait root /usr/libexec/rlogind rlogind -L
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#login stream tcp6 nowait root /usr/libexec/rlogind rlogind -L
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
rexecd is IPv6 capable (not sure who will be using it though)
2002-06-06 03:06:51 +04:00
#exec stream tcp6 nowait root /usr/libexec/rexecd rexecd
Use more sane defaults for commented out fingerd entry. From OpenBSD and Zafer Aydogan. PR/31341.
2005-09-18 23:47:28 +04:00
#finger stream tcp nowait nobody /usr/libexec/fingerd fingerd -lsmu
#finger stream tcp6 nowait nobody /usr/libexec/fingerd fingerd -lsmu
new lines for identd [ipv6 support and option adjustment]
2004-02-01 00:51:53 +03:00
#ident stream tcp nowait nobody /usr/libexec/identd identd -l -o OTHER -e -N
#ident stream tcp6 nowait nobody /usr/libexec/identd identd -l -o OTHER -e -N
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#comsat dgram udp wait root /usr/libexec/comsat comsat
comsat is ipv6 ready
2001-03-08 04:27:24 +03:00
#comsat dgram udp6 wait root /usr/libexec/comsat comsat
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#ntalk dgram udp wait nobody:tty /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 21:47:55 +04:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Games
#
add hunt(6) entry (commented by default)
1997-10-04 13:16:00 +04:00
#hunt dgram udp wait nobody /usr/games/huntd huntd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Internal services
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#tcpmux stream tcp nowait root internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#echo stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#discard stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#discard stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#chargen stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#chargen stream tcp6 nowait nobody internal
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#daytime stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#daytime stream tcp6 nowait nobody internal
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#time stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#time stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#echo dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#discard dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#discard dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#chargen dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#chargen dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#daytime dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#daytime dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#time dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#time dgram udp6 wait nobody internal
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#qotd stream tcp nowait nobody /usr/games/fortune fortune
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#qotd stream tcp6 nowait nobody /usr/games/fortune fortune
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Kerberos authenticated services
#
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 18:12:39 +03:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Services run ONLY on the Kerberos server
#
Remove the (not supported) krbupdate service, and add (commented out) kerberos-adm.
2000-08-05 04:48:15 +04:00
#kerberos-adm stream tcp nowait root /usr/libexec/kadmind kadmind
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#kerberos-adm stream tcp6 nowait root /usr/libexec/kadmind kadmind
kpasswd is a "wait" type service.
2001-03-26 02:33:15 +04:00
#kpasswd dgram udp wait root /usr/libexec/kpasswdd kpasswdd
#kpasswd dgram udp6 wait root /usr/libexec/kpasswdd kpasswdd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
Add (commented out) hprop service, along with a short explanation of when to enable it and why.
2000-08-07 00:35:13 +04:00
# The hprop service is run on slave KDCs to receive the database from
# the master KDC.
#hprop stream tcp nowait root /usr/libexec/hpropd hpropd
Add a tcp6 entry for hpropd.
2001-04-06 04:29:58 +04:00
#hprop stream tcp6 nowait root /usr/libexec/hpropd hpropd
Add (commented out) hprop service, along with a short explanation of when to enable it and why.
2000-08-07 00:35:13 +04:00
#
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
# RPC based services
#
Cleanup formatting of the rpc services.
2001-04-06 04:33:33 +04:00
#rstatd/1-3 dgram rpc/udp wait:100 nobody:kmem /usr/libexec/rpc.rstatd rpc.rstatd
#rstatd/1-3 dgram rpc/udp6 wait:100 nobody:kmem /usr/libexec/rpc.rstatd rpc.rstatd
#rusersd/2-3 dgram rpc/udp wait:100 nobody /usr/libexec/rpc.rusersd rpc.rusersd
#rusersd/2-3 dgram rpc/udp6 wait:100 nobody /usr/libexec/rpc.rusersd rpc.rusersd
#walld/1 dgram rpc/udp wait nobody:tty /usr/libexec/rpc.rwalld rpc.rwalld
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#sprayd/1 dgram rpc/udp wait nobody /usr/libexec/rpc.sprayd rpc.sprayd
Also register rquota version 2.
2003-02-14 17:56:45 +03:00
#rquotad/1-2 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad