Configure Network Services
The default installation of Solaris provides many network services, most of which the Web services host does not need. These additional services can be used by hackers to exploit vulnerabilities within them to compromise the host. Eliminating these unneeded services will enhance the security of the Web services host.
Remove Unneeded Files
Remove all files except the following from /etc/rcS.d:
S30rootusr.sh
S40standardmounts.sh
S50drvconfig
S60devlinks
S70buildmnttabs.sh
Remove all files except the following from /etc/rc2.d:
S01MOUNTFSYS
S05RMTMPFILES
S20sysetup
S69inet
S72inetsvc
S74syslog
S75cron
S88utmpd
Remove all files except the following from /etc/init.d:
MOUNTFSYS
RMTMPFILES
inetsvc
standardmounts
buildmnttab
rootusr
sysetup
devlinks
cron
drvconfig
syslog
inetinit
Remove ALL files, except those for services remaining in the directories above from /etc/rc0.d and /etc/rc1.d
Remove ALL files from /etc/rc3.d
Remove all entries except the following from /etc/services.
ftp 21/tcp
Remove all entries except the following from /etc/inetd.conf:
ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd
Click here for the rest of this 12-part tip.
