Re: the netbase/inetd conspiracy
Anthony Towns <aj@azure.humbug.org.au> writes:
> On Tue, Sep 24, 2002 at 09:30:29PM +0200, Andreas Metzler wrote:
> > >> Add exit 0 at the top of /etc/init.d/inetd
> > > That only helps if the init script is the only way to start inetd.
> > > If you want to disable it for security reasons, and want to make sure
> > > it can't start even by accident, then that's not good enough.
> > I can only think of two ways it could accidentally started are:
> > * big bug: [...]
> > * root is silly and executes /usr/sbin/inetd directly.
>
> If you're really worried about these, you should also be worried about
> someone calling /usr/sbin/inetd with a file other than /etc/inetd.conf
> as an argument, and starting up whatever services they might happen to
> want, whether /etc/inetd.conf exists or not.
Of course, inetd can't start any daemons that aren't already there.
And, if the daemons are there, somebody might start them without inetd
being there at all.
Reply to: