what services you run on your linux system

something i found great is that disabling the unnessery service not only speed boot-time speed but also give you system high security even if unnessery service is vunerable or outdated still your system is protected as its not running and disable on default mode

but before we get quick importent question is which service we actually needed as a home workstation (home pc) not as a server

i disable ip6

http://fedorasolved.org/network-solutions/disable-ipv6

also disable rcp bind

because it open port 111 on udp and tcp on zenmap


http://isc.sans.edu/diary.html?storyid=7324

ssh is disable smart card support is disable ..........etc

http://www.uic.edu/depts/accc/security/os/rhlinux.html#0

http://bobpeers.com/linux/services

please comment

 

Why bother? You're home, what can happen?
Better yet, do you understand what might go wrong because you made those changes?
Mrk

 

yes i fully understand my linux start behaving like a windows if i stop something wrong


but in i same time i wonder why to run services you dont need for example bluetooth ip6 or cups (i dont use printer on linux) at least there something to do on windows

 

Being a noob on Linux, you couldn't pay me to touch them. Besides, what happened to the "Linux isn't exploitable" argument? I am assuming though, that these articles are geared towards people running servers, and not us unimportant users sitting in our homes.

 

truely agree with you mrk

its like playing with fire ......... but we kids has habbit we dont understand unless our hand burn

i do feel a huge speed boost but same time it rise my sensors to 2 degrees which is pretty bad so i switch back enabling those silly service again

 

Here another link showing recommendations. http://www.mjmwired.net/resources/mjm-services-f12.html
Bluetooth for example is a no-brainer to disable if you don't use it.

 

On Redhat based distro's I first configure selinux as disabled. And the desktops (which won't go anywhere, I disable ip*tables.

 

You mean disable. I just did that to Bluetooth, having no such device or need.

 

All about services. Very comprehensive site.

http://www.hscripts.com/tutorials/linux-services/index.php