Xerox FREEFLOW 701P46740 Security Manual

Also see for FreeFlow version 6.0: System guide Software guide System guide

Xerox FREEFLOW 701P46740 Security Manual Manual pdf 14 page image

10 Security GuideUser level changesThe following user-level changes are made:• all users for at, cron, and batch are disallowed• nuucp account is disabled• listen account is disabled• password entry locked for bin, sys, adm, uucp, nobody,noaccess, nobody4, and anonymoussadmind Distributed systemadministration daemonUsed by Solstice AdminSuite applications toperform distributed system administration. Notused by the Xerox FreeFlow Print Server.shell Remote executionserverUsed by rsh(1) and rcp(1) commands. TheXerox print command line client relies on theremote shell internet service being enabledsince it uses the rcp(1) command to transfer filesonto the Xerox FreeFlow Print Server. However,this service represents a security risk. Not usedby the Xerox FreeFlow Print Server.Sun-dr (DCS) Domain configurationserverThe Domain Configuration Server (DCS) is adaemon process that runs on Sun servers thatsupport remote Dynamic Reconfiguration (DR)clients. It is started by the Service ManagementFacility when the first DR request is receivedfrom a client connecting to the network servicesun-dr.talk Server for talk program The talk utility is a two-way, screen orientedcommunication program. Not used by the XeroxFreeFlow Print Server.telnet TELNET protocolserverThis can be used to enable/disable the telnetserver. This does not affect using the telnet clientfrom the Xerox FreeFlow Print Server to anotherhost running on TELNET server.time Time Protocol server Outdated time service. Seldom used anymore.Not used by the Xerox FreeFlow Print Server.uucp UUCP server UNIX to UNIX system copy over networks.UUCP is not securely set up and can beexploited in many ways. Not used by the XeroxFreeFlow Print Server.INETD Service Description