Page 1 of 1
Services Disabled by Default on Mint?
Posted: Sun Feb 03, 2013 10:17 pm
by zeldarocks
In my quest to secure and harden my system, I've been briefly researching disabling services in Linux; to my surprise, it would appear that in Ubuntu at least, services are disabled by default. Is the same the case in Linux Mint?
Re: Services Disabled by Default on Mint?
Posted: Mon Feb 04, 2013 6:19 am
by xenopeek
Linux Mint comes enabled with Samba to facilitate interoperability with Windows devices on your home network (like file and printer sharing). That is the only difference, as both Ubuntu and Linux Mint come with the avahi-daemon (for automatic discovery of network attached devices), cupsd (printing service), dhclient (to automatically get an IP address at boot) and dnsmasq (a local DNS forwarder, as part of NetworkManager) services running on a default install.
Both cupsd and dnsmasq by default only listen on localhost, so are never at risk. avahi-daemon and dhclient listen on the local network, so are not at risk on a home network. dhclient is needed on a public network (like a Wi-Fi hotspot) for DHCP to function, to get an IP address, so you wouldn't normally disable this service unless you have fixed IP address.
If you want you can disable Samba and Avahi if you don't need them. To shut both down until a reboot, run:
Code: Select all
sudo stop nmbd
sudo stop smbd
sudo stop avahi-daemon
If you want to prevent them from automatically starting at boot, run:
Code: Select all
echo manual | sudo tee -a /etc/init/nmbd.override
echo manual | sudo tee -a /etc/init/smbd.override
echo manual | sudo tee -a /etc/init/avahi-daemon.override
Re: Services Disabled by Default on Mint?
Posted: Mon Feb 04, 2013 8:38 am
by zeldarocks
Ohter than Samba and avhi-daemon; I am more or less protected against intrusion, right?
Re: Services Disabled by Default on Mint?
Posted: Mon Feb 04, 2013 9:26 am
by xenopeek
Yes, and if you have a broadband Internet connection your Cable/DSL modem would normally not allow remote users to connect to your machine in any case. Unless you configured that specifically. If you install or start additional services, and those are reachable from the Internet, you of course need to configure those properly for security. You can also enable the UFW firewall on Linux Mint easily, which will block all remote access to your services unless you configure to allow it.