Actions

If running, stop process rbootd.

 

Set START_RBOOTD=0 in /etc/rc.config.d/netdaemons.

MiscellaneousDaemons.disable_smbclient

Headline

Disable the HP-UX CIFS client.

Default

Y

Description

CIFS can be used to share files and other resources between computers. The

 

CIFS product suite integrates HP-UX with Microsoft Windows environments

 

by providing remote file sharing, printer access and authentication services

 

between HP-UX and Windows systems.

Actions

If running. stop process cifsclient.

 

Set RUN_CIFSCLIENT=0 in /etc/rc.config.d/cifsclient.

MiscellaneousDaemons.disable_smbserver

Headline

Disable the HP-UX CIFS (Samba) Server.

Default

N

Description

CIFS can be used to share files and other resources between computers. The

 

CIFS product suite integrates HP-UX with Microsoft Windows environments

 

by providing remote file sharing, printer access, and authentication services

 

between HP-UX and Windows systems.

Actions

If running, stop processes smbd and nmbd.

 

Set RUN_SAMBA=0 in /etc/rc.config.d/samba.

MiscellaneousDaemons.nfs_core

Headline

Disable the NFS and RPC infrastructure.

Default

N

Description

RPC is a traditional part of UNIX used in a variety of UNIX services, including

 

NIS, NFS, and others. If you are sure you are not using a service that is affected,

 

you may disable RPC. RPC has had security issues in the past and by default

 

does not support a strong authentication mechanism. If you disable the core

 

NFS infrastructure, HP-UX Bastille disables NIS, NIS+ and NFS.

Actions

Stop and disable NIS/NIS+ Server and Client.

 

Stop and disable NFS Server and Client.

 

Set NFS_CORE=0 in /etc/rc.config.d/nfsconf.

MiscellaneousDaemons.nobody_secure_rpc

Headline

Disable the nobody user in the ONC Secure RPC

Default

N

Description

Secure RPC is a cryptographically authenticated means to communicate with

 

a system. By configuring keyserv to prevent the use of default keys for the

 

nobody user, other users are prevented from accessing the nobody user with

 

default credentials. This is a safer way to operate Secure RPC.

Actions

Add the -dflag to the KEYSERV_OPTIONS= parameter line in /etc/

 

rc.config.d/namesvrs.

MiscellaneousDaemons.snmpd

Headline

Disable SNMPD.

Default

N

52 Question modules

Page 52
Image 52
HP UX Bastille Software manual MiscellaneousDaemons.disablesmbclient, MiscellaneousDaemons.disablesmbserver