On Thursday 31 August 2006 10:48, Warren Togami wrote:

Any objections to blanket disabling of this stuff across all servers?

Warren Togami wtogami@redhat.com

isdn pcmcia apmd rawdevices microcode_ctl Utterly useless to us.

i agree

atd anacron Do we want to keep these? I've always turned them off personally.

anacron could be useful if the boxes are down when they are supposed to run things but probably not needed. does anyone use at for anything on the servers?

messagebus haldaemon cups acpid xfs Only relevant to desktops?

should be ok, i have cups on my file and print server but thats it as far as servers go

xinetd Only turn this on if we actually use anything that requires it?

sounds fine to me

arptables_jf Have or will we ever use this?

probably not if we need it we can re-enable it.

we should definitely have only what we need enabled. everything else should be off.

Dennis

On Thu, 2006-08-31 at 11:48 -0400, Warren Togami wrote:

Any objections to blanket disabling of this stuff across all servers?

Warren Togami wtogami@redhat.com

isdn pcmcia apmd rawdevices microcode_ctl Utterly useless to us.

atd anacron Do we want to keep these? I've always turned them off personally.

messagebus haldaemon cups acpid xfs Only relevant to desktops?

xinetd Only turn this on if we actually use anything that requires it?

arptables_jf Have or will we ever use this?

we disable or remove all of these from the systems I run here at duke.

isdn, pcmcia, apmd and cups should all be removed unless they are being used.

-sv

On Thu, 2006-08-31 at 13:10 -0400, Elliot Lee wrote:

I think you'll find that some of those will break stuff if they get turned off. And others do useful stuff. And a few can be turned off. But don't just do a blanket disable because you're not sure that they're useful...

umm, no they won't.

isdn, pcmcia, apmd and microcode_ctl won't hurt anything

rawdevices is really only used by oracle.

atd only matters for things using at queuing - if we have something doing that we should find it and stop it.

anacron - bah! and ick

dbus and hal only matter if we were using of the network fun, which we're not. They matter more in the future but they don't right now and on rhel4 boxes it's all kudzu-riffic, still.

cups - obviously - no acpid - has some meaning in the event we have acpi devices that need to be negotiated with for different system power states - not on these boxes, though.

xfs - if there is no x the the x font server matters not.

...

xinetd Only turn this on if we actually use anything that requires it?

xinetd - obvious

...

arptables_jf Have or will we ever use this?

We aren't controllowing which arp requests/replies are going on so this doesn't matter.

I've turned off each and every one of these one my servers without fault.

-sv