Re: [ILUG] syslogd

From: kevin lyda (kevin at domain suberic.net)
Date: Mon 03 Jul 2000 - 12:07:18 IST


On Mon, Jul 03, 2000 at 11:43:44AM +0100, SP K wrote:
> !!! that was the answer THANK-YOU!! ..i had syslog
> commented out of /etc/services <- stupid me!! ,thnx a
> mil its working perfect now :)

for anyone trying to secure a unix/linux box here's a tip: leave
/etc/services alone. /etc/services is an informational file used by the
libc function getservbyname(3) and friends. it does *not* cause anything
to listen on those ports, and while some programs (like that version of
syslogd) will die and not start w/o the right entry in /etc/services,
it's a few extra lines of c to make syslogd default to using 514/udp if
it can't lookup syslog with a getservbyname call.

inetd.conf, boot time rc scripts and root crontab files are much more
important things to edit for the security concerned.

kevin

-- 
kevin at domain suberic.net       "there's nothing wrong with windows 2000 that
fork()'ed on 37058400    linux can't fix."  -- va linux t-shirt
meatspace place: home    
                        


This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:46 GMT