Security after fresh install?

heri0n · 10-29-2004, 03:49 PM

Generally how secure is your system after a fresh slack 10 install?
And how about after you disable all services in /etc/inetd.conf except sshd?

rotvogel · 10-29-2004, 05:37 PM

It's generally a good idea to disable all servers you don't need/use. Don't forget to install the security fixes posted after the initial release of the Slackware version you're using. You can find the updates in the slackware-10.0/patches/packages section on the Slackware.com FTP and mirrors.

Smokey · 10-29-2004, 05:38 PM

Well there are updates and patches for packages even for Slackware 10. So you have to go to a slackware security advisories page and do what is recommended.

You can use slackpkg available in /extra to upgrade any updates/patches for Slackware 10 more easily.

gbonvehi · 10-29-2004, 09:00 PM

Quote:

Originally posted by heri0n
Generally how secure is your system after a fresh slack 10 install?
And how about after you disable all services in /etc/inetd.conf except sshd?

It's kinda good

Like rotvogel said, if you don't use Apache, FTP, SHH, NFS (& Portmap that it's needed for it) just disable them by making them non executable or use pkgtool goto Setup and then services. Sometimes when you upgrade some package like Apache the init file may get executable again, so check it after each update.
To disable some service on /etc/inetd.conf just put a # at the beggining of the line and restart inetd.