Services Disabled by Default on Mint?

Connection sharing, Firewall, Samba..etc
Forum rules
Before you post please read how to get help

Services Disabled by Default on Mint?

Postby zeldarocks on Sun Feb 03, 2013 10:17 pm

In my quest to secure and harden my system, I've been briefly researching disabling services in Linux; to my surprise, it would appear that in Ubuntu at least, services are disabled by default. Is the same the case in Linux Mint?
zeldarocks
Level 1
Level 1
 
Posts: 7
Joined: Sun Feb 03, 2013 6:52 am

Linux Mint is funded by ads and donations.
 

Re: Services Disabled by Default on Mint?

Postby xenopeek on Mon Feb 04, 2013 6:19 am

Linux Mint comes enabled with Samba to facilitate interoperability with Windows devices on your home network (like file and printer sharing). That is the only difference, as both Ubuntu and Linux Mint come with the avahi-daemon (for automatic discovery of network attached devices), cupsd (printing service), dhclient (to automatically get an IP address at boot) and dnsmasq (a local DNS forwarder, as part of NetworkManager) services running on a default install.

Both cupsd and dnsmasq by default only listen on localhost, so are never at risk. avahi-daemon and dhclient listen on the local network, so are not at risk on a home network. dhclient is needed on a public network (like a Wi-Fi hotspot) for DHCP to function, to get an IP address, so you wouldn't normally disable this service unless you have fixed IP address.

If you want you can disable Samba and Avahi if you don't need them. To shut both down until a reboot, run:
Code: Select all
sudo stop nmbd
sudo stop smbd
sudo stop avahi-daemon

If you want to prevent them from automatically starting at boot, run:
Code: Select all
echo manual | sudo tee -a /etc/init/nmbd.override
echo manual | sudo tee -a /etc/init/smbd.override
echo manual | sudo tee -a /etc/init/avahi-daemon.override
User avatar
xenopeek
Level 21
Level 21
 
Posts: 15449
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Services Disabled by Default on Mint?

Postby zeldarocks on Mon Feb 04, 2013 8:38 am

Ohter than Samba and avhi-daemon; I am more or less protected against intrusion, right?
zeldarocks
Level 1
Level 1
 
Posts: 7
Joined: Sun Feb 03, 2013 6:52 am

Re: Services Disabled by Default on Mint?

Postby xenopeek on Mon Feb 04, 2013 9:26 am

Yes, and if you have a broadband Internet connection your Cable/DSL modem would normally not allow remote users to connect to your machine in any case. Unless you configured that specifically. If you install or start additional services, and those are reachable from the Internet, you of course need to configure those properly for security. You can also enable the UFW firewall on Linux Mint easily, which will block all remote access to your services unless you configure to allow it.
User avatar
xenopeek
Level 21
Level 21
 
Posts: 15449
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands


Return to Other networking topics

Who is online

Users browsing this forum: Eksodus and 6 guests