LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-11-2010, 01:27 AM   #1
pinga123
Member
 
Registered: Sep 2009
Posts: 684
Blog Entries: 2

Rep: Reputation: 36
How to remove services from nsswitch file?


According to security manual only DNS, files, or LDAP should be allowed in nsswitch file however it seems like i have many other services configured in nsswitch files.

below are the content from nsswitch file.
What services can be removed considering the system stability.

Code:
passwd:     files
shadow:     files
group:      files
hosts:      files dns
bootparams: nisplus [NOTFOUND=return] files
ethers:     files
netmasks:   files
networks:   files
protocols:  files
rpc:        files
services:   files
netgroup:   nisplus
publickey:  nisplus
automount:  files nisplus
aliases:    files nisplus
 
Old 10-11-2010, 01:34 AM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 23,066
Blog Entries: 11

Rep: Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910
Please elaborate (using the file you posted) which bits you consider
to be the services? I'd also like to hear from you whether your
organisation makes actual use of nis(plus) ...


Cheers,
Tink
 
Old 10-11-2010, 01:40 AM   #3
pinga123
Member
 
Registered: Sep 2009
Posts: 684
Blog Entries: 2

Original Poster
Rep: Reputation: 36
We are using DNS servers and not NIS.also wanted to add here that i dont have any working knowledge of what does this file signifies i just want to follow the security manual statement which is as below.


"The name services configuration file nsswitch.conf must be configured to only support DNS, files, or LDAP. All other service types must be removed from the nsswitch.conf file. "

Last edited by pinga123; 10-11-2010 at 01:44 AM.
 
Old 10-11-2010, 01:56 AM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 23,066
Blog Entries: 11

Rep: Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910
May I recommend a thorough read of 'man 5 nsswitch.conf"?

Determine from there in how far the "security recommendation" is
feasible, and can be adhered to in your environment w/o breaking it.


Cheers,
Tink
 
Old 10-11-2010, 02:28 AM   #5
pinga123
Member
 
Registered: Sep 2009
Posts: 684
Blog Entries: 2

Original Poster
Rep: Reputation: 36
We are using dns server instead of NIS should we follow what the following link says.

http://www.faqs.org/docs/securing/chap6sec71.html
 
Old 10-11-2010, 02:32 AM   #6
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 23,066
Blog Entries: 11

Rep: Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910
Quote:
Originally Posted by pinga123 View Post
We are using dns server instead of NIS should we follow what the following link says.

http://www.faqs.org/docs/securing/chap6sec71.html
Did you read the man-page? There are potential pitfalls in
changes to the file if you're not cautious about the version
of libc your system uses.

While the advice given in the link is sound it's not sufficient
to base a decision on.


Cheers,
Tink
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
nsswitch.conf file deleted, how can I rebuild it? slinkysteve Linux - Networking 2 04-04-2006 05:36 PM
remove services alaios Debian 3 01-10-2005 10:28 PM
how to remove linux Services?? Ameii83 Linux - Software 5 12-28-2004 09:17 PM
how 2 remove services from startup?? fhameed Linux - Software 4 08-30-2004 11:39 PM
How can i remove these services? Kinstonian Linux - General 2 04-15-2003 11:19 PM


All times are GMT -5. The time now is 08:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration