LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-29-2004, 08:00 PM   #1
alaios
Senior Member
 
Registered: Jan 2003
Location: Aachen
Distribution: Opensuse 11.2 (nice and steady)
Posts: 2,203

Rep: Reputation: 45
xinetd vs inetd


Do u know the basic differences between xinetd and inetd..
I have written this here. Because i have learned that xinetd is more secure than inetd..... If something like that is true,, so why services like apache,mysql e.t.c run form inet.d ??Thx
 
Old 04-30-2004, 02:34 PM   #2
iainr
Member
 
Registered: Nov 2002
Location: England
Distribution: Ubuntu 9.04
Posts: 631

Rep: Reputation: 30
The inetd daemon is a master daemon that listens on a number of different network ports. When a connection comes in, it wakes up the relevant daemon (e.g. telnetd, ftpd, fingerd, rshd). This reduces system overhead where daemons are only called occasionally : for the 99% of the time that no new connections are coming in, only one daemon is using up CPU cycles rather than lots. (If you have a daemon which is being used a lot, such as ftpd in a dedicated ftp server, you would run it all the time and not use inetd).

As far as I know, xinetd and inetd and just different implementations of this same functionality. Xinet is more complex (rather than one single config. file, lots of different ones) but allows more granularity of control (and tools like chkconfig make management simple).

I'm not aware of any real security advantages for one or the other.
 
Old 05-01-2004, 12:48 AM   #3
alaios
Senior Member
 
Registered: Jan 2003
Location: Aachen
Distribution: Opensuse 11.2 (nice and steady)
Posts: 2,203

Original Poster
Rep: Reputation: 45
thx for the reply.... But it woulb be useful is someone telling us about secutity
 
Old 05-01-2004, 10:16 AM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Xinetd gives you a liittle more control and added flexibility over various network paramers (logging, load throttling, etc) and implements tcp_wrappers differently than inetd. Is one inherently insecure compared to the other? Not really. Here's a couple of links about the features in xinetd:

http://www.synack.net/xinetd/faq.html
http://www.xinetd.org/#features
http://www-106.ibm.com/developerwork...l=805,p=xinetd
 
Old 05-01-2004, 10:21 AM   #5
sh1ft
Member
 
Registered: Feb 2004
Location: Ottawa, Ontario, Can
Distribution: Slackware, ubuntu
Posts: 391

Rep: Reputation: 32
If you don't use daemons like ftp or webservers, will it be okay to disable inetd? Will i still be able to use the internet and play quake 3 online?
Would disabling this make my system more secure or would it just be redundant?
 
Old 05-01-2004, 10:58 AM   #6
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
ianr gave a good description of the function of inetd. The question is really do you run alot of server applications and do they experience high loads. If you turn off inetd, you will have to manually configure your system to start those daemons indivdually at start-up. If you have a couple of server daemons that experience a relatively low amount of incomming connections, then it doesn't make sense to have each daemon running all the time and you might want to use inetd.

If you are not planning to run any daemons at all, check the inetd.conf file to see what applications are currently running through inetd. If you are sure that you don't need them, then you can turn off inetd. It shouldn't affect your ability to access the internet of play games. In terms of security, you should always turn off server daemons that your are not using, so disabling inetd is a good idea if you don't need it or any of the servers run through it.
 
Old 05-01-2004, 11:30 AM   #7
sh1ft
Member
 
Registered: Feb 2004
Location: Ottawa, Ontario, Can
Distribution: Slackware, ubuntu
Posts: 391

Rep: Reputation: 32
Thanks, killing inetd closed about 4 ports. Also not using up system memory anymore either.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
vsftpd inetd -> xinetd slackster Linux - Networking 2 06-26-2005 05:37 PM
Inetd or Xinetd? allelopath Linux - Software 2 04-13-2005 01:03 PM
inetd vs xinetd nero64 Linux - Newbie 1 11-26-2002 08:13 AM
inetd VS xinetd dave4545 Linux - Newbie 22 10-24-2002 07:07 PM
Xinetd vs. Inetd JHuizingh Linux - General 2 07-19-2002 09:45 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration