1.Disabled Volume Management
# cd /etc/rc2.d
# mv S92volmgt s92volmgt
After this configuration, CD-ROMs will not be automatically mounted. To manually mount a CD-ROM use:
# mount -F hsfs -o ro /dev/dsk/c0t6d0s0 /mnt
2.Disabled Dtlogin
Dtlogin is disabled if the server is not intended to run the Common Desktop Environment (CDE) or GUIs.
# cd /etc/rc2.d
# mv S99dtlogin s99dtlogin
3.Disabled Printing
# /usr/lib/lpshut
# cd /etc/rc2.d
# mv S80lp s80lp
4.Disabled RPC
RPC is disabled if the server is not intended to run CDE. To determine what is using rcp, use “rpcinfo –p”.
# cd /etc/rc2.d
# mv /etc/rc2.d/S71rpc /etc/rc2.d/s71rpc
5.Disabled the NFS ClIEnt
# /etc/init.d/nfs.client stop
# cd /etc/rc2.d
# mv S73nfs.client s73nfs.client
6.Disabled the NFS Server
# /etc/init.d/nfs.server stop
# cd /etc/rc3.d
# mv S15nfs.server s15nfs.server
7.Disabled UUCP
# cd /etc/rc2.d
# mv S70uucp s70uucp
8.Disabled the LDAP Client
# cd /etc/rc2.d
# mv S71ldap.client s71ldap.client
9.Disabled the Auto Mounter
# /etc/init.d/autofs stop
# cd /etc/rc2.d
# mv S74autofs s74autofs
10.Disabled the Network Time Daemon
# /etc/init.d/xntpd stop
# cd /etc/rc2.d
# mv S74xntpd s74xntpd
11.Disabled the Logical Link Control Driver
# cd /etc/rc2.d
# ./S40llc2 stop
# mv S40llc2 s40llc2
12.Disabled Auto Install
# cd /etc/rc2.d
# mv S72autoinstall s72autoinstall
13.Disabled Cachefs Daemon
# cd /etc/rc2.d
# mv S73cachefs.daemon s73cachefs.daemon
14.Disabled Asynchronous PPP Daemon
# cd /etc/rc2.d
# mv S47pppd s47pppd
15.Disabled cacheos.finish Script
# cd /etc/rc2.d
# mv S93cacheos.finish s93cacheos.finish
16.Disabled Preservation of Files Killed by Vi
# cd /etc/rc2.d
# mv S80PRESERVE s80PRESERVE
17.Disabled Power Management
# cd /etc/rc2.d
# mv S85power s85power
18.Disabled Flash Prom Update
# cd /etc/rc2.d
# mv S75flashprom s75flashprom
Before attempting to update the eeprom, temporally enable this script.
19.Disabled “Buttons n Dials-Setup”
# cd /etc/rc2.d
# mv S89bdconfig s89bdconfig
20.Disabled Spc
# cd /etc/rc2.d
# mv S80spc s80spc
21.Disabled Sun Management Center
# cd /etc/rc2.d
# mv S90wbem s90wbem
22.Disabled Network Cache and Accelerator
# cd /etc/rc2.d
# mv S94ncalogd s94ncalogd
# mv S95nCAD s95ncad
Used to increase web server performance
23.Disabled Mobile IP Agent
# cd /etc/rc3.d
# mv S80mipagent s80mipagent
24.Disabled SNMP
# cd /etc/rc3.d
# /usr/bin/pkill -9 -x -u 0 "(snmpdx|snmpv2d|mibiisa)"
# mv S76snmpdx s76snmpdx
25.Disabled Apache
# cd /etc/rc3.d
# mv S50apache s50apache
26.Disabled DMI
# cd /etc/rc3.d
# /usr/bin/pkill -9 -x -u 0 "(snmpXdmid|dmispd)"
# mv S77dmi s77dmi
27.Disabled the Sendmail Daemon
The system continues to send mail out. It does not receive mail in to the server. This eliminates a significant security
vulnerability.
# /etc/init.d/sendmail stop
Prevented sendmail from starting at boot:
# cd /etc/rc2.d
# mv S88sendmail s88sendmail
Ensured the sendmail queue is cleaned out:
# crontab –e
# The Sendmail daemon is not running - This tells it to send mail out
05,20,35,50 * * * * /usr/lib/sendmail –q
28.Disabled Multicasting
Multicasting is typically used for clustering. Ensure that it is not required by an application.
# vi /etc/init.d/inetsvc
#
# Add a static route for multicast packets out our default interface.
# The default interface is the interface that corresponds to the node name.
#
#mcastif=`/sbin/dhcpinfo Yiaddr`
#
#if [ $? -ne 0 ]; then
# mcastif=`uname -n`
#fi
#
#echo "Setting default interface for multicast: c"
#/usr/sbin/route add -interface -netmask "240.0.0.0" "224.0.0.0" "$mcastif"
29.Disabled the Serial Port Listeners
This configuration can be accomplished unless there is a modem or console terminal attached to the system.
推荐阅读
- 元气骑士如何快速得宝石
- SA118中文翻译 5 Solaris8入门教材
- 简单的绿幕抠像如何操作
- 平均利润是如何形成的
- 魅族PRO7如何装sim卡?魅族PRO7装sim卡注意事项
- solaris系统panics故障实例与解决
- 山药褐斑病如何防治
- 如何把现金存入银行卡
- 第四章:DNS客户端的设置 Solaris网络管理培训
- 1 Solaris的中文命令参考手册