Disable the useless service in Solaris

最新推荐文章于 2025-07-06 08:00:00 发布

原创最新推荐文章于 2025-07-06 08:00:00 发布 · 490 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#service #solaris #network #security #basic #up

本文介绍了如何使用'svcs -x'获取SMF服务的基本信息，并提供了思考禁用服务的原因，特别是为了提高安全性而减少攻击面的方法。还推荐了一个项目，其中详细说明了禁用不必要的网络服务的简单步骤。

1. You can get some basic information about any SMF service with 'svcs
-x <fmri>'. That information generally includes a man page where you can
read a detailed description of what the service does.

2. You should think about *why* you are interested in disabling
services. If it's to improve security by reducing your attack surface
(the most common reason this issue comes up), then I suggest that you
should concentrate your effort on *network* services which are reachable
from outside your system. For that, your work is mostly done already;
see #3 below.

3. If you haven't already done so, look at
http://opensolaris.org/os/community/security/projects/sbd. There you can
read about simple ways to disable all unnecessary network services.