How to prune a print & file server to leave minimal services running

wolfpeach · 06-29-2004, 03:24 AM

Hi all.

I'm configuring a print & file server (Debian Woody w/ 2.4.18 kernel) for a small network of XP machines & want to have the bare minimum of services running.

I know I need ssh, samba & cron, but unsure about the rest... Dont want to leave any uneccesary security holes.

Heres the list of services currently running:

nfs-kernel-server
makedev
lpd
klogd
atd
nfs-common
cron
samba
exim
ppp
inetd
ssh
sysklogd

What could I safely prune??

Cheers,
Wolfpeach

ppuru · 06-29-2004, 04:20 AM

Unless you often run a non-recurring event, you can knock off atd.

You can switch off inetd - let it remain in your system but do not run it at startup.

You can uninstall / take down NFS and portmap ... if you do not plan to use them

Unless you want your server to send you mails - logwatch, tripwire alerts, etc, you can stop exim too.

So the only services running on your system will be

makedev
lpd
klogd
cron
samba
exim --- may or may not
ssh
sysklogd

wolfpeach · 06-29-2004, 04:31 AM

Thanks ppuru - thats v helpful!

One question - what is 'makedev'?? Is this not to do with adding extra bits of hardware to a machine? (='make device')

Wolfpeach

ppuru · 06-29-2004, 06:27 AM

not sure how debian uses that service.

wolfpeach · 06-29-2004, 06:35 AM

OK - will turn it off and let you know if anything breaks!

;-)