[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ports puzzle



csj said:

> So it seems something called portmapper isn't getting
> restarted. Should it be started in the place? Is this a security
> issue? Or should I just ignore the whole thing?

I noticed this on one of my debian boxes I was securing last week,
it looks like portmap is started in /etc/rcS.d, so when the system
comes back to the default runlevel scripts in this directory may
not(probably don't) get executed.

Not sure why this is, probably to make portmap available very early
in the boot process for something like NIS.

I don't think it's a security issue, though depending on your config
you may want to have portmap start out of /etc/rc2.d or whichever
your default runlevel is if its important to you. I think the
start-stop-daemon system may prevent a 2nd copy of portmap from
starting so it may be harmless to do. I just tried it on my
laptop here and trying to start a 2nd copy of portmap didn't
do anything so it should be safe ....

nate





Reply to: