source: archive/xinetd.xml

trunk
Last change on this file was 3f2db3a6, checked in by Pierre Labastie <pierre.labastie@…>, 17 months ago

Remove sect1info tags

They only contain a date tag that is nowhere used.
  • Property mode set to 100644
File size: 15.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!-- Development seems to be over and the xinetd.og site does not seem to exist any more. -->
8 <!-- <!ENTITY xinetd-download-http "http://www.xinetd.org/xinetd-&xinetd-version;.tar.gz"> -->
9 <!ENTITY xinetd-download-http " ">
10 <!ENTITY xinetd-download-ftp "&sources-anduin-ftp;/xinetd/xinetd-&xinetd-version;.tar.gz">
11 <!ENTITY xinetd-md5sum "77358478fd58efa6366accae99b8b04c">
12 <!ENTITY xinetd-size "308 KB">
13 <!ENTITY xinetd-buildsize "5.0 MB">
14 <!ENTITY xinetd-time "less than 0.1 SBU">
15]>
16
17<sect1 id="xinetd" xreflabel="xinetd-&xinetd-version;">
18 <?dbhtml filename="xinetd.html"?>
19
20
21 <title>xinetd-&xinetd-version;</title>
22
23 <indexterm zone="xinetd">
24 <primary sortas="a-Xinetd">Xinetd</primary>
25 </indexterm>
26
27 <sect2 role="package">
28 <title>Introduction to xinetd</title>
29
30 <para><application>xinetd</application> is the eXtended InterNET services
31 daemon, a secure replacement for <command>inetd</command>.</para>
32
33 &lfs7a_checked;
34
35 <bridgehead renderas="sect3">Package Information</bridgehead>
36 <itemizedlist spacing="compact">
37 <listitem>
38 <para>Download (HTTP): <ulink url="&xinetd-download-http;"/></para>
39 </listitem>
40 <listitem>
41 <para>Download (FTP): <ulink url="&xinetd-download-ftp;"/></para>
42 </listitem>
43 <listitem>
44 <para>Download MD5 sum: &xinetd-md5sum;</para>
45 </listitem>
46 <listitem>
47 <para>Download size: &xinetd-size;</para>
48 </listitem>
49 <listitem>
50 <para>Estimated disk space required: &xinetd-buildsize;</para>
51 </listitem>
52 <listitem>
53 <para>Estimated build time: &xinetd-time;</para>
54 </listitem>
55 </itemizedlist>
56
57 <bridgehead renderas="sect3">xinetd Dependencies</bridgehead>
58
59 <bridgehead renderas="sect4">Optional</bridgehead>
60 <para role="optional">
61 <ulink url="ftp://ftp.porcupine.org/pub/security/">TCP wrappers (deprecated)</ulink>
62 </para>
63
64 <para condition="html" role="usernotes">User Notes:
65 <ulink url="&blfs-wiki;/xinetd"/></para>
66
67 </sect2>
68
69 <sect2 role="installation">
70 <title>Installation of xinetd</title>
71
72 <para>Install <application>xinetd</application> by running the following
73 commands:</para>
74
75<screen><userinput>sed -i -e "s/exec_server/child_process/" xinetd/builtins.c &amp;&amp;
76sed -i -e "/register unsigned count/s/register//" xinetd/itox.c &amp;&amp;
77./configure --prefix=/usr --mandir=/usr/share/man --with-loadavg &amp;&amp;
78make</userinput></screen>
79
80 <para>This package does not come with a test suite.</para>
81
82 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
83
84<screen role="root"><userinput>make install</userinput></screen>
85
86 </sect2>
87
88 <sect2 role="commands">
89 <title>Command Explanations</title>
90
91 <!-- CVE-2013-4342 https://bugzilla.redhat.com/show_bug.cgi?id=1006100 -->
92 <para><command>sed ... xinetd/builtins.c</command>: This command fixes
93 a security issue.</para>
94
95 <para><command>sed ... xinetd/itox.c</command>: This command fixes some
96 compiler warnings.</para>
97
98 </sect2>
99
100 <sect2 role="configuration">
101 <title>Configuring xinetd</title>
102
103 <sect3 id="xinetd-config">
104 <title>Config Files</title>
105
106 <para><filename>/etc/xinetd.conf</filename> and
107 <filename class="directory">/etc/xinetd.d/*</filename></para>
108
109 <indexterm zone="xinetd xinetd-config">
110 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
111 </indexterm>
112
113 <indexterm zone="xinetd xinetd-config">
114 <primary sortas="e-etc-xinetd.d">/etc/xinetd.d/*</primary>
115 </indexterm>
116
117 </sect3>
118
119 <sect3>
120 <title>Configuration Information</title>
121
122 <para>Ensure the path to all daemons is
123 <filename class="directory">/usr/sbin</filename>, rather than the default
124 path of <filename class="directory">/usr/bin</filename>, and install the
125 <application>xinetd</application> configuration files by running the
126 following commands as the <systemitem class="username">root</systemitem>
127 user:</para>
128
129<screen role="root"><userinput>cat &gt; /etc/xinetd.conf &lt;&lt; "EOF"
130<literal># Begin /etc/xinetd
131# Configuration file for xinetd
132
133defaults
134{
135 instances = 60
136 log_type = SYSLOG daemon
137 log_on_success = HOST PID USERID
138 log_on_failure = HOST USERID
139 cps = 25 30
140}
141
142# All service files are stored in the /etc/xinetd.d directory
143
144includedir /etc/xinetd.d
145
146# End /etc/xinetd</literal>
147EOF</userinput></screen>
148
149 <para>All of the following files have the statement, "disable = yes".
150 To activate any of the services, this statement will need to be changed
151 to "disable = no".</para>
152
153 <note>
154 <para>The following files are listed to demonstrate several
155 <application>xinetd</application> applications. In many cases, these
156 applications are not needed. Some classic applications are
157 considered security risks. For example, <command>telnet</command>,
158 <command>rlogin</command>, <command>rexec</command>, and
159 <command>rsh</command> transmit unencrypted usernames and passwords
160 over the network and can be easily replaced with a more secure
161 alternative: <command>ssh</command>.</para>
162 </note>
163
164<screen role="root"><?dbfo keep-together="auto"?><userinput>install -v -d -m755 /etc/xinetd.d &amp;&amp;
165
166cat &gt; /etc/xinetd.d/systat &lt;&lt; "EOF" &amp;&amp;
167<literal># Begin /etc/xinetd.d/systat
168
169service systat
170{
171 disable = yes
172 socket_type = stream
173 wait = no
174 user = nobody
175 server = /bin/ps
176 server_args = -auwwx
177 only_from = 128.138.209.0
178 log_on_success = HOST
179}
180
181# End /etc/xinetd.d/systat</literal>
182EOF
183
184cat &gt; /etc/xinetd.d/echo &lt;&lt; "EOF" &amp;&amp;
185<literal># Begin /etc/xinetd.d/echo
186
187service echo
188{
189 disable = yes
190 type = INTERNAL
191 id = echo-stream
192 socket_type = stream
193 protocol = tcp
194 user = root
195 wait = no
196}
197
198service echo
199{
200 disable = yes
201 type = INTERNAL
202 id = echo-dgram
203 socket_type = dgram
204 protocol = udp
205 user = root
206 wait = yes
207}
208
209# End /etc/xinetd.d/echo</literal>
210EOF
211
212cat &gt; /etc/xinetd.d/chargen &lt;&lt; "EOF" &amp;&amp;
213<literal># Begin /etc/xinetd.d/chargen
214
215service chargen
216{
217 disable = yes
218 type = INTERNAL
219 id = chargen-stream
220 socket_type = stream
221 protocol = tcp
222 user = root
223 wait = no
224}
225
226service chargen
227{
228 disable = yes
229 type = INTERNAL
230 id = chargen-dgram
231 socket_type = dgram
232 protocol = udp
233 user = root
234 wait = yes
235}
236
237# End /etc/xinetd.d/chargen</literal>
238EOF
239
240cat &gt; /etc/xinetd.d/daytime &lt;&lt; "EOF" &amp;&amp;
241<literal># Begin /etc/xinetd.d/daytime
242
243service daytime
244{
245 disable = yes
246 type = INTERNAL
247 id = daytime-stream
248 socket_type = stream
249 protocol = tcp
250 user = root
251 wait = no
252}
253
254service daytime
255{
256 disable = yes
257 type = INTERNAL
258 id = daytime-dgram
259 socket_type = dgram
260 protocol = udp
261 user = root
262 wait = yes
263}
264
265# End /etc/xinetd.d/daytime</literal>
266EOF
267<!-- The last one without && -->
268cat &gt; /etc/xinetd.d/time &lt;&lt; "EOF"
269<literal># Begin /etc/xinetd.d/time
270
271service time
272{
273 disable = yes
274 type = INTERNAL
275 id = time-stream
276 socket_type = stream
277 protocol = tcp
278 user = root
279 wait = no
280}
281
282service time
283{
284 disable = yes
285 type = INTERNAL
286 id = time-dgram
287 socket_type = dgram
288 protocol = udp
289 user = root
290 wait = yes
291}
292
293# End /etc/xinetd.d/time</literal>
294EOF</userinput></screen>
295
296 <indexterm zone="xinetd xinetd-config">
297 <primary sortas="e-etc-xinetd.d-login">/etc/xinetd.d/login</primary>
298 </indexterm>
299
300 <indexterm zone="xinetd xinetd-config">
301 <primary sortas="e-etc-xinetd.d-shell">/etc/xinetd.d/shell</primary>
302 </indexterm>
303
304 <indexterm zone="xinetd xinetd-config">
305 <primary sortas="e-etc-xinetd.d-exec">/etc/xinetd.d/exec</primary>
306 </indexterm>
307
308 <indexterm zone="xinetd xinetd-config">
309 <primary sortas="e-etc-xinetd.d-comsat">/etc/xinetd.d/comsat</primary>
310 </indexterm>
311
312 <indexterm zone="xinetd xinetd-config">
313 <primary sortas="e-etc-xinetd.d-talk">/etc/xinetd.d/talk</primary>
314 </indexterm>
315
316 <indexterm zone="xinetd xinetd-config">
317 <primary sortas="e-etc-xinetd.d-ntalk">/etc/xinetd.d/ntalk</primary>
318 </indexterm>
319
320 <indexterm zone="xinetd xinetd-config">
321 <primary sortas="e-etc-xinetd.d-telnet">/etc/xinetd.d/telnet</primary>
322 </indexterm>
323
324 <indexterm zone="xinetd xinetd-config">
325 <primary sortas="e-etc-xinetd.d-ftp">/etc/xinetd.d/ftp</primary>
326 </indexterm>
327
328 <indexterm zone="xinetd xinetd-config">
329 <primary sortas="e-etc-xinetd.d-tftp">/etc/xinetd.d/tftp</primary>
330 </indexterm>
331
332 <indexterm zone="xinetd xinetd-config">
333 <primary sortas="e-etc-xinetd.d-systat">/etc/xinetd.d/systat</primary>
334 </indexterm>
335
336 <indexterm zone="xinetd xinetd-config">
337 <primary sortas="e-etc-xinetd.d-finger">/etc/xinetd.d/finger</primary>
338 </indexterm>
339
340 <indexterm zone="xinetd xinetd-config">
341 <primary sortas="e-etc-xinetd.d-netstat">/etc/xinetd.d/netstat</primary>
342 </indexterm>
343
344 <indexterm zone="xinetd xinetd-config">
345 <primary sortas="e-etc-xinetd.d-echo">/etc/xinetd.d/echo</primary>
346 </indexterm>
347
348 <indexterm zone="xinetd xinetd-config">
349 <primary sortas="e-etc-xinetd.d-chargen">/etc/xinetd.d/chargen</primary>
350 </indexterm>
351
352 <indexterm zone="xinetd xinetd-config">
353 <primary sortas="e-etc-xinetd.d-daytime">/etc/xinetd.d/daytime</primary>
354 </indexterm>
355
356 <indexterm zone="xinetd xinetd-config">
357 <primary sortas="e-etc-xinetd.d-time">/etc/xinetd.d/time</primary>
358 </indexterm>
359
360 <indexterm zone="xinetd xinetd-config">
361 <primary sortas="e-etc-xinetd.d-rstatd">/etc/xinetd.d/rstatd</primary>
362 </indexterm>
363
364 <indexterm zone="xinetd xinetd-config">
365 <primary sortas="e-etc-xinetd.d-rquotad">/etc/xinetd.d/rquotad</primary>
366 </indexterm>
367
368 <indexterm zone="xinetd xinetd-config">
369 <primary sortas="e-etc-xinetd.d-ruserd">/etc/xinetd.d/ruserd</primary>
370 </indexterm>
371
372 <indexterm zone="xinetd xinetd-config">
373 <primary sortas="e-etc-xinetd.d-sprayd">/etc/xinetd.d/sprayd</primary>
374 </indexterm>
375
376 <indexterm zone="xinetd xinetd-config">
377 <primary sortas="e-etc-xinetd.d-walld">/etc/xinetd.d/walld</primary>
378 </indexterm>
379
380 <indexterm zone="xinetd xinetd-config">
381 <primary sortas="e-etc-xinetd.d-irc">/etc/xinetd.d/irc</primary>
382 </indexterm>
383
384 <para>The format of the <filename>/etc/xinetd.conf</filename> is
385 documented in the <filename>xinetd.conf.5</filename> man page.
386 <!-- 13-12-12 the http://www.xinetd.org is broken
387 Further
388 information can be found at <ulink url="http://www.xinetd.org"/>.
389 -->
390 </para>
391
392 </sect3>
393
394 <sect3 id="xinetd-init">
395 <title><phrase revision="sysv">Boot Script</phrase>
396 <phrase revision="systemd">Systemd Unit</phrase></title>
397
398 <para>As the <systemitem class="username">root</systemitem> user, install
399 the <phrase revision="sysv"><filename>/etc/rc.d/init.d/xinetd</filename>
400 init script</phrase>
401 <phrase revision="systemd"><filename>xinetd.service</filename>
402 unit</phrase> included in
403 the <xref linkend="bootscripts" revision="sysv"/>
404 <xref linkend="systemd-units" revision="systemd"/> package.</para>
405
406 <indexterm zone="xinetd xinetd-init">
407 <primary sortas="f-xinetd">xinetd</primary>
408 </indexterm>
409
410<screen role="root"><userinput>make install-xinetd</userinput></screen>
411
412 <para>As the <systemitem class="username">root</systemitem> user,
413 use the <phrase revision="sysv">new boot script</phrase>
414 <phrase revision="systemd"><command>systemctl</command> command</phrase>
415 to start <command>xinetd</command>:</para>
416
417<screen role="root" revision="sysv"><userinput>/etc/rc.d/init.d/xinetd start</userinput></screen>
418
419<screen role="root" revision="systemd"><userinput>systemctl start xinetd</userinput></screen>
420
421 <para>Check the
422 <phrase revision="sysv"><filename>/var/log/daemon.log</filename></phrase>
423 <phrase revision="systemd"><command>journalctl</command> output</phrase>
424 to ensure the appropriate services are started. If no services are
425 enabled, the program will not start without the
426 <option>-stayalive</option> option.</para>
427
428<!--
429<screen><literal>Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rlogind is not
430executable [line=29]
431Aug 22 21:40:21 dps10 xinetd[2696]: Error parsing attribute server -
432DISABLING SERVICE [line=29]
433Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rshd is not
434executable [line=42]</literal></screen>
435
436 <para>These errors are because most of the servers
437 <command>xinetd</command> is trying to control are not
438 installed yet.</para>
439-->
440 </sect3>
441
442 </sect2>
443
444 <sect2 role="content">
445 <title>Contents</title>
446
447 <segmentedlist>
448 <segtitle>Installed Programs</segtitle>
449 <segtitle>Installed Libraries</segtitle>
450 <segtitle>Installed Directories</segtitle>
451
452 <seglistitem>
453 <seg>itox, xconv.pl, and xinetd</seg>
454 <seg>None</seg>
455 <seg>/etc/xinetd.d/</seg>
456 </seglistitem>
457 </segmentedlist>
458
459 <variablelist>
460 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
461 <?dbfo list-presentation="list"?>
462 <?dbhtml list-presentation="table"?>
463
464 <varlistentry id="itox">
465 <term><command>itox</command></term>
466 <listitem>
467 <para>is a utility used for converting
468 <filename>inetd.conf</filename> files to
469 <filename>xinetd.conf</filename> format.</para>
470 <indexterm zone="xinetd itox">
471 <primary sortas="b-itox">itox</primary>
472 </indexterm>
473 </listitem>
474 </varlistentry>
475
476 <varlistentry id="xconv.pl">
477 <term><command>xconv.pl</command></term>
478 <listitem>
479 <para>is a <application>Perl</application> script used for
480 converting <filename>inetd.conf</filename> files to
481 <filename>xinetd.conf</filename> format, similar to
482 <command>itox</command>.</para>
483 <indexterm zone="xinetd xconv.pl">
484 <primary sortas="b-xconv.pl">xconv.pl</primary>
485 </indexterm>
486 </listitem>
487 </varlistentry>
488
489 <varlistentry id="xinetd-prog">
490 <term><command>xinetd</command></term>
491 <listitem>
492 <para>is the Internet services daemon.</para>
493 <indexterm zone="xinetd xinetd-prog">
494 <primary sortas="b-xinetd">xinetd</primary>
495 </indexterm>
496 </listitem>
497 </varlistentry>
498
499 </variablelist>
500
501 </sect2>
502
503</sect1>
Note: See TracBrowser for help on using the repository browser.