Re: inetd.conf security "Fred J. Bourgeois, III" <fjb3@sbcglobal.net> writes:
>Same comment applies to the RPC services - do you really need walld?
>I don't remember rpc.smserverd (is that the Sun admin tool?) but I
>always disable it on my sparcs.
rpc.smserverd is required for vold to work; the service is
defined as follows:
100155/1 tli rpc/ticotsord wait root /usr/lib/smedia/rpc.smserverd rpc.smserverd
Pay special attention to the 3rd field: "rpc/ticotsord" means
that all it supports are connections over the TLI loopback
device "ticotsord". It cannot be called remotely so it does not
pose any kind of remote security risk.
But you are indeed better off not running sadmind or admind.
Casper |