Home / server / Questions / 531356
Accepted
Signal15
Asked: 2013-08-16 13:27:16 +0800 CST

Correct way to modify startup options for svc:/network/finger:default in Solaris 10?

  • 772

I want to make "finger" harmless on Solaris 10, and I see this in the man page;

OPTIONS
   fingerd supports the following option.
  -s    Enable secure mode. Deny forwarding of queries to other remote hosts.

Is it possible to change the start-up options for the in.fingerd without "cheating" and editing the manifest (/var/svc/manifest/network/finger.xml) itself?

security

2 Answers

  1. Best Answer

    Turns out the official way to modify an SMF of an inetd-managed service is with inetadm;

    Before

    inetadm -l svc:/network/finger:default | grep exec
         exec="/usr/sbin/in.fingerd"

    Fix

    inetadm -m svc:/network/finger:default exec="/usr/sbin/in.fingerd -s"

    After

    inetadm -l svc:/network/finger:default | grep exec
         exec="/usr/sbin/in.fingerd -s"
    • 1

  2. In general, you should be able to change the "start/exec" property of a service with svccfg command:

    svccfg -s FMRI setprop start/exec = astring: \"PATH_TO_EXECUTABLE COMMAND_LINE_OPTIONS\"

    Then, refresh and restart the service:

    svcadm refresh FMRI
svcadm restart FMRI
    • 0