![]() Some services don't support being stopped/started very well if at all. Features such as StopWhenUnneeded=yes already exist in systemd for example, so it's only a matter of time until these capabilities get fleshed out. Over time this will work itself out, IMO, and both services will be stable and feature rich.Įventually both services will offer on demand starting & stopping across the board for all the services they manage. There's a good overview of the 2 competing technologies here.īoth technologies are trying to do slightly different things, IMO, given their feature sets, systemd seems geared more towards servers whereas upstart seems geared more towards the desktop roll. Part of it is the current split between systemd and upstart. This is really the heart of your question but there isn't really a silver bullet solution to making these services "smart" so that they run when they're being used, rather than all the time. You can do so through the system-config-printer GUI. To be able to print you'll need to setup each printer individually on your system. To turn CUPS off, which you don't really need by the way, you can follow the same dance of turning the service off and then disabling it from starting up. part of zeroconf (plug-n-play), turn it offįor the remaining 3 you can do the same things we did for Samba to turn them off as well.So now Samba's off we're left with the following: It allows you to check which services you want to run and in which runlevel they should be started/stopped: $ sudo apt-get install sysv-rc-conf To make them stay off I've been using this tool, sysv-rc-conf, to manage services from a console, it works better than most. For Samba you can use the service command: $ sudo service nmbd stop Turning services off can be confusing with all the flux that's been going on with upstart, /etc/rc.d, business so it might be difficult to figure out which service is under which technology. To check that they're running you can use the following command, status: $ status nmbd It's questionable that you'd really need that running on a laptop whether on localhost or your IP facing your network. You can probably right off the bat disable Samba, it accounts for 2 of the above services, nmbd and smbd. DHCP server daemon responsible for getting your IP address, have to have this one. ![]() ![]() Looking at this list there are several services which I'd leave alone. Taking your output from the netstat command, what looks like a lot of services is actually a very short list: $ netstat -lntup | awk ''|sed 's/LISTEN//'| cut -d"/" -f2|sort|uniq|grep -v Foreign How do I configure those services so they only listen to the outside world when I'm actually using them? ![]() ![]() Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name This is the output of netstat -lntup by the root user, removing the localhost addresses: Active Internet connections (only servers) The only one that I might use is ssh (although it is probably not well configured, I will keep this matter to another question).Īs far as I know ipp protocol is used by CUPS to share my printers, I don't need to share them, just access printers from a server. Nmap done: 1 IP address (1 host up) scanned in 0.05 seconds Nmap scan report for localhost (127.0.0.1) Surprise, surprise, I have lots of active services listen to localhost: $ nmap 127.0.0.1 A few days ago I started to care a lot about my data security, I end up nmaping myself with: nmap 127.0.0.1 ![]()
0 Comments
Leave a Reply. |