Disabling rpcbind/portmapper
Michele Chubirka <[email protected]>
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <004001c3a2ef$c6e44d00$9b0a0a0a@nijinsky> |
How safe is it to mv/stop the S71rpc startup script in Solaris. I remember system panics with Solaris 2.6 and 2.7 when attempting to run "S71rpc stop", so I got in the habit of preventing all the associated programs (rpc.statd, etc...) from running and then blocking port 111 using wrappers/rpcbind replacement and ipf. I thought that some Sun programs like Solstice DiskSuite, Legato, CDE, Tooltalk, etc... used to need rpcbind on the loopback, is that the case? Can it be safely moved/stopped if I'm not using NIS, NFS, or any of the others I've disabled? Michele Chubirka Unix Systems Engineer George Washington University 202-994-5791