source: archive/xinetd.xml@ ba91515

10.0 10.1 11.0 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind perl-modules qt5new trunk xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since ba91515 was ba91515, checked in by Bruce Dubbs <bdubbs@…>, 5 years ago

Archive xinetd

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@18357 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!-- Development seems to be over and the xinetd.og site does not seem to exist any more. -->
8 <!-- <!ENTITY xinetd-download-http "http://www.xinetd.org/xinetd-&xinetd-version;.tar.gz"> -->
9 <!ENTITY xinetd-download-http " ">
10 <!ENTITY xinetd-download-ftp "&sources-anduin-ftp;/xinetd/xinetd-&xinetd-version;.tar.gz">
11 <!ENTITY xinetd-md5sum "77358478fd58efa6366accae99b8b04c">
12 <!ENTITY xinetd-size "308 KB">
13 <!ENTITY xinetd-buildsize "5.0 MB">
14 <!ENTITY xinetd-time "less than 0.1 SBU">
15]>
16
17<sect1 id="xinetd" xreflabel="xinetd-&xinetd-version;">
18 <?dbhtml filename="xinetd.html"?>
19
20 <sect1info>
21 <othername>$LastChangedBy$</othername>
22 <date>$Date$</date>
23 </sect1info>
24
25 <title>xinetd-&xinetd-version;</title>
26
27 <indexterm zone="xinetd">
28 <primary sortas="a-Xinetd">Xinetd</primary>
29 </indexterm>
30
31 <sect2 role="package">
32 <title>Introduction to xinetd</title>
33
34 <para><application>xinetd</application> is the eXtended InterNET services
35 daemon, a secure replacement for <command>inetd</command>.</para>
36
37 &lfs7a_checked;
38
39 <bridgehead renderas="sect3">Package Information</bridgehead>
40 <itemizedlist spacing="compact">
41 <listitem>
42 <para>Download (HTTP): <ulink url="&xinetd-download-http;"/></para>
43 </listitem>
44 <listitem>
45 <para>Download (FTP): <ulink url="&xinetd-download-ftp;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download MD5 sum: &xinetd-md5sum;</para>
49 </listitem>
50 <listitem>
51 <para>Download size: &xinetd-size;</para>
52 </listitem>
53 <listitem>
54 <para>Estimated disk space required: &xinetd-buildsize;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated build time: &xinetd-time;</para>
58 </listitem>
59 </itemizedlist>
60
61 <bridgehead renderas="sect3">xinetd Dependencies</bridgehead>
62
63 <bridgehead renderas="sect4">Optional</bridgehead>
64 <para role="optional">
65 <ulink url="ftp://ftp.porcupine.org/pub/security/">TCP wrappers (deprecated)</ulink>
66 </para>
67
68 <para condition="html" role="usernotes">User Notes:
69 <ulink url="&blfs-wiki;/xinetd"/></para>
70
71 </sect2>
72
73 <sect2 role="installation">
74 <title>Installation of xinetd</title>
75
76 <para>Install <application>xinetd</application> by running the following
77 commands:</para>
78
79<screen><userinput>sed -i -e "s/exec_server/child_process/" xinetd/builtins.c &amp;&amp;
80sed -i -e "/register unsigned count/s/register//" xinetd/itox.c &amp;&amp;
81./configure --prefix=/usr --mandir=/usr/share/man --with-loadavg &amp;&amp;
82make</userinput></screen>
83
84 <para>This package does not come with a test suite.</para>
85
86 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
87
88<screen role="root"><userinput>make install</userinput></screen>
89
90 </sect2>
91
92 <sect2 role="commands">
93 <title>Command Explanations</title>
94
95 <!-- CVE-2013-4342 https://bugzilla.redhat.com/show_bug.cgi?id=1006100 -->
96 <para><command>sed ... xinetd/builtins.c</command>: This command fixes
97 a security issue.</para>
98
99 <para><command>sed ... xinetd/itox.c</command>: This command fixes some
100 compiler warnings.</para>
101
102 </sect2>
103
104 <sect2 role="configuration">
105 <title>Configuring xinetd</title>
106
107 <sect3 id="xinetd-config">
108 <title>Config Files</title>
109
110 <para><filename>/etc/xinetd.conf</filename> and
111 <filename class="directory">/etc/xinetd.d/*</filename></para>
112
113 <indexterm zone="xinetd xinetd-config">
114 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
115 </indexterm>
116
117 <indexterm zone="xinetd xinetd-config">
118 <primary sortas="e-etc-xinetd.d">/etc/xinetd.d/*</primary>
119 </indexterm>
120
121 </sect3>
122
123 <sect3>
124 <title>Configuration Information</title>
125
126 <para>Ensure the path to all daemons is
127 <filename class="directory">/usr/sbin</filename>, rather than the default
128 path of <filename class="directory">/usr/bin</filename>, and install the
129 <application>xinetd</application> configuration files by running the
130 following commands as the <systemitem class="username">root</systemitem>
131 user:</para>
132
133<screen role="root"><userinput>cat &gt; /etc/xinetd.conf &lt;&lt; "EOF"
134<literal># Begin /etc/xinetd
135# Configuration file for xinetd
136
137defaults
138{
139 instances = 60
140 log_type = SYSLOG daemon
141 log_on_success = HOST PID USERID
142 log_on_failure = HOST USERID
143 cps = 25 30
144}
145
146# All service files are stored in the /etc/xinetd.d directory
147
148includedir /etc/xinetd.d
149
150# End /etc/xinetd</literal>
151EOF</userinput></screen>
152
153 <para>All of the following files have the statement, "disable = yes".
154 To activate any of the services, this statement will need to be changed
155 to "disable = no".</para>
156
157 <note>
158 <para>The following files are listed to demonstrate several
159 <application>xinetd</application> applications. In many cases, these
160 applications are not needed. Some classic applications are
161 considered security risks. For example, <command>telnet</command>,
162 <command>rlogin</command>, <command>rexec</command>, and
163 <command>rsh</command> transmit unencrypted usernames and passwords
164 over the network and can be easily replaced with a more secure
165 alternative: <command>ssh</command>.</para>
166 </note>
167
168<screen role="root"><?dbfo keep-together="auto"?><userinput>install -v -d -m755 /etc/xinetd.d &amp;&amp;
169
170cat &gt; /etc/xinetd.d/systat &lt;&lt; "EOF" &amp;&amp;
171<literal># Begin /etc/xinetd.d/systat
172
173service systat
174{
175 disable = yes
176 socket_type = stream
177 wait = no
178 user = nobody
179 server = /bin/ps
180 server_args = -auwwx
181 only_from = 128.138.209.0
182 log_on_success = HOST
183}
184
185# End /etc/xinetd.d/systat</literal>
186EOF
187
188cat &gt; /etc/xinetd.d/echo &lt;&lt; "EOF" &amp;&amp;
189<literal># Begin /etc/xinetd.d/echo
190
191service echo
192{
193 disable = yes
194 type = INTERNAL
195 id = echo-stream
196 socket_type = stream
197 protocol = tcp
198 user = root
199 wait = no
200}
201
202service echo
203{
204 disable = yes
205 type = INTERNAL
206 id = echo-dgram
207 socket_type = dgram
208 protocol = udp
209 user = root
210 wait = yes
211}
212
213# End /etc/xinetd.d/echo</literal>
214EOF
215
216cat &gt; /etc/xinetd.d/chargen &lt;&lt; "EOF" &amp;&amp;
217<literal># Begin /etc/xinetd.d/chargen
218
219service chargen
220{
221 disable = yes
222 type = INTERNAL
223 id = chargen-stream
224 socket_type = stream
225 protocol = tcp
226 user = root
227 wait = no
228}
229
230service chargen
231{
232 disable = yes
233 type = INTERNAL
234 id = chargen-dgram
235 socket_type = dgram
236 protocol = udp
237 user = root
238 wait = yes
239}
240
241# End /etc/xinetd.d/chargen</literal>
242EOF
243
244cat &gt; /etc/xinetd.d/daytime &lt;&lt; "EOF" &amp;&amp;
245<literal># Begin /etc/xinetd.d/daytime
246
247service daytime
248{
249 disable = yes
250 type = INTERNAL
251 id = daytime-stream
252 socket_type = stream
253 protocol = tcp
254 user = root
255 wait = no
256}
257
258service daytime
259{
260 disable = yes
261 type = INTERNAL
262 id = daytime-dgram
263 socket_type = dgram
264 protocol = udp
265 user = root
266 wait = yes
267}
268
269# End /etc/xinetd.d/daytime</literal>
270EOF
271<!-- The last one without && -->
272cat &gt; /etc/xinetd.d/time &lt;&lt; "EOF"
273<literal># Begin /etc/xinetd.d/time
274
275service time
276{
277 disable = yes
278 type = INTERNAL
279 id = time-stream
280 socket_type = stream
281 protocol = tcp
282 user = root
283 wait = no
284}
285
286service time
287{
288 disable = yes
289 type = INTERNAL
290 id = time-dgram
291 socket_type = dgram
292 protocol = udp
293 user = root
294 wait = yes
295}
296
297# End /etc/xinetd.d/time</literal>
298EOF</userinput></screen>
299
300 <indexterm zone="xinetd xinetd-config">
301 <primary sortas="e-etc-xinetd.d-login">/etc/xinetd.d/login</primary>
302 </indexterm>
303
304 <indexterm zone="xinetd xinetd-config">
305 <primary sortas="e-etc-xinetd.d-shell">/etc/xinetd.d/shell</primary>
306 </indexterm>
307
308 <indexterm zone="xinetd xinetd-config">
309 <primary sortas="e-etc-xinetd.d-exec">/etc/xinetd.d/exec</primary>
310 </indexterm>
311
312 <indexterm zone="xinetd xinetd-config">
313 <primary sortas="e-etc-xinetd.d-comsat">/etc/xinetd.d/comsat</primary>
314 </indexterm>
315
316 <indexterm zone="xinetd xinetd-config">
317 <primary sortas="e-etc-xinetd.d-talk">/etc/xinetd.d/talk</primary>
318 </indexterm>
319
320 <indexterm zone="xinetd xinetd-config">
321 <primary sortas="e-etc-xinetd.d-ntalk">/etc/xinetd.d/ntalk</primary>
322 </indexterm>
323
324 <indexterm zone="xinetd xinetd-config">
325 <primary sortas="e-etc-xinetd.d-telnet">/etc/xinetd.d/telnet</primary>
326 </indexterm>
327
328 <indexterm zone="xinetd xinetd-config">
329 <primary sortas="e-etc-xinetd.d-ftp">/etc/xinetd.d/ftp</primary>
330 </indexterm>
331
332 <indexterm zone="xinetd xinetd-config">
333 <primary sortas="e-etc-xinetd.d-tftp">/etc/xinetd.d/tftp</primary>
334 </indexterm>
335
336 <indexterm zone="xinetd xinetd-config">
337 <primary sortas="e-etc-xinetd.d-systat">/etc/xinetd.d/systat</primary>
338 </indexterm>
339
340 <indexterm zone="xinetd xinetd-config">
341 <primary sortas="e-etc-xinetd.d-finger">/etc/xinetd.d/finger</primary>
342 </indexterm>
343
344 <indexterm zone="xinetd xinetd-config">
345 <primary sortas="e-etc-xinetd.d-netstat">/etc/xinetd.d/netstat</primary>
346 </indexterm>
347
348 <indexterm zone="xinetd xinetd-config">
349 <primary sortas="e-etc-xinetd.d-echo">/etc/xinetd.d/echo</primary>
350 </indexterm>
351
352 <indexterm zone="xinetd xinetd-config">
353 <primary sortas="e-etc-xinetd.d-chargen">/etc/xinetd.d/chargen</primary>
354 </indexterm>
355
356 <indexterm zone="xinetd xinetd-config">
357 <primary sortas="e-etc-xinetd.d-daytime">/etc/xinetd.d/daytime</primary>
358 </indexterm>
359
360 <indexterm zone="xinetd xinetd-config">
361 <primary sortas="e-etc-xinetd.d-time">/etc/xinetd.d/time</primary>
362 </indexterm>
363
364 <indexterm zone="xinetd xinetd-config">
365 <primary sortas="e-etc-xinetd.d-rstatd">/etc/xinetd.d/rstatd</primary>
366 </indexterm>
367
368 <indexterm zone="xinetd xinetd-config">
369 <primary sortas="e-etc-xinetd.d-rquotad">/etc/xinetd.d/rquotad</primary>
370 </indexterm>
371
372 <indexterm zone="xinetd xinetd-config">
373 <primary sortas="e-etc-xinetd.d-ruserd">/etc/xinetd.d/ruserd</primary>
374 </indexterm>
375
376 <indexterm zone="xinetd xinetd-config">
377 <primary sortas="e-etc-xinetd.d-sprayd">/etc/xinetd.d/sprayd</primary>
378 </indexterm>
379
380 <indexterm zone="xinetd xinetd-config">
381 <primary sortas="e-etc-xinetd.d-walld">/etc/xinetd.d/walld</primary>
382 </indexterm>
383
384 <indexterm zone="xinetd xinetd-config">
385 <primary sortas="e-etc-xinetd.d-irc">/etc/xinetd.d/irc</primary>
386 </indexterm>
387
388 <para>The format of the <filename>/etc/xinetd.conf</filename> is
389 documented in the <filename>xinetd.conf.5</filename> man page.
390 <!-- 13-12-12 the http://www.xinetd.org is broken
391 Further
392 information can be found at <ulink url="http://www.xinetd.org"/>.
393 -->
394 </para>
395
396 </sect3>
397
398 <sect3 id="xinetd-init">
399 <title><phrase revision="sysv">Boot Script</phrase>
400 <phrase revision="systemd">Systemd Unit</phrase></title>
401
402 <para>As the <systemitem class="username">root</systemitem> user, install
403 the <phrase revision="sysv"><filename>/etc/rc.d/init.d/xinetd</filename>
404 init script</phrase>
405 <phrase revision="systemd"><filename>xinetd.service</filename>
406 unit</phrase> included in
407 the <xref linkend="bootscripts" revision="sysv"/>
408 <xref linkend="systemd-units" revision="systemd"/> package.</para>
409
410 <indexterm zone="xinetd xinetd-init">
411 <primary sortas="f-xinetd">xinetd</primary>
412 </indexterm>
413
414<screen role="root"><userinput>make install-xinetd</userinput></screen>
415
416 <para>As the <systemitem class="username">root</systemitem> user,
417 use the <phrase revision="sysv">new boot script</phrase>
418 <phrase revision="systemd"><command>systemctl</command> command</phrase>
419 to start <command>xinetd</command>:</para>
420
421<screen role="root" revision="sysv"><userinput>/etc/rc.d/init.d/xinetd start</userinput></screen>
422
423<screen role="root" revision="systemd"><userinput>systemctl start xinetd</userinput></screen>
424
425 <para>Check the
426 <phrase revision="sysv"><filename>/var/log/daemon.log</filename></phrase>
427 <phrase revision="systemd"><command>journalctl</command> output</phrase>
428 to ensure the appropriate services are started. If no services are
429 enabled, the program will not start without the
430 <option>-stayalive</option> option.</para>
431
432<!--
433<screen><literal>Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rlogind is not
434executable [line=29]
435Aug 22 21:40:21 dps10 xinetd[2696]: Error parsing attribute server -
436DISABLING SERVICE [line=29]
437Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rshd is not
438executable [line=42]</literal></screen>
439
440 <para>These errors are because most of the servers
441 <command>xinetd</command> is trying to control are not
442 installed yet.</para>
443-->
444 </sect3>
445
446 </sect2>
447
448 <sect2 role="content">
449 <title>Contents</title>
450
451 <segmentedlist>
452 <segtitle>Installed Programs</segtitle>
453 <segtitle>Installed Libraries</segtitle>
454 <segtitle>Installed Directories</segtitle>
455
456 <seglistitem>
457 <seg>itox, xconv.pl, and xinetd</seg>
458 <seg>None</seg>
459 <seg>/etc/xinetd.d/</seg>
460 </seglistitem>
461 </segmentedlist>
462
463 <variablelist>
464 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
465 <?dbfo list-presentation="list"?>
466 <?dbhtml list-presentation="table"?>
467
468 <varlistentry id="itox">
469 <term><command>itox</command></term>
470 <listitem>
471 <para>is a utility used for converting
472 <filename>inetd.conf</filename> files to
473 <filename>xinetd.conf</filename> format.</para>
474 <indexterm zone="xinetd itox">
475 <primary sortas="b-itox">itox</primary>
476 </indexterm>
477 </listitem>
478 </varlistentry>
479
480 <varlistentry id="xconv.pl">
481 <term><command>xconv.pl</command></term>
482 <listitem>
483 <para>is a <application>Perl</application> script used for
484 converting <filename>inetd.conf</filename> files to
485 <filename>xinetd.conf</filename> format, similar to
486 <command>itox</command>.</para>
487 <indexterm zone="xinetd xconv.pl">
488 <primary sortas="b-xconv.pl">xconv.pl</primary>
489 </indexterm>
490 </listitem>
491 </varlistentry>
492
493 <varlistentry id="xinetd-prog">
494 <term><command>xinetd</command></term>
495 <listitem>
496 <para>is the Internet services daemon.</para>
497 <indexterm zone="xinetd xinetd-prog">
498 <primary sortas="b-xinetd">xinetd</primary>
499 </indexterm>
500 </listitem>
501 </varlistentry>
502
503 </variablelist>
504
505 </sect2>
506
507</sect1>
Note: See TracBrowser for help on using the repository browser.