Re: A question about some network services

[Mike Renfro <renfro@tntech.edu>]

On Tue, Apr 02, 2002 at 07:45:21PM +0200, eim wrote:

> All this services are stareted from inet.d / xinet.d so I can easily
> disable them via "update-inetd", so my only question is:

And *that's* the problem; update-inetd. I've run into this myself,
too, and the solution is to not use update-inetd as a daily
administration tool, or to modify its default behavior a bit. The
manpage does actually cover this, but toward the bottom:

EXAMPLES

       You've installed ssh (secure encrypting remote shell)  and
       wish to disable its unencrypted cousins:

         update-inetd --comment-chars '#' --disable login,shell,exec,telnet

       Using a single '#' character as a comment-char prevents
       update-inetd to reenable the services on package upgrades.

Without the --comment-chars flag, update-inetd is really only useful
as a tool in the context of a package install/upgrade/removal.


-- 
Mike Renfro  / R&D Engineer, Center for Manufacturing Research,
931 372-3601 / Tennessee Technological University -- renfro@tntech.edu


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org