RHEL6 server xinetd super daemon

1. xinetd is the rhel6 super daemon in linux, and rhel5 super daemon is the inetd super daemon. [root @ rootbug ~] # Yuminstallxinetd: service processes such as rsync, ftp, and tftp are hosted in the super daemon for security management. 2. Check whether the super daemon is enabled. [root @ rootbug ~] # Chkconfig -- list | grep

1. xinetd is the rhel6 super daemon in linux, and rhel5 super daemon is inetd.
Install super daemon
[Root @ rootbug ~] # Yum install xinetd
A super daemon can host common service processes such as rsync, ftp, and tftp to a super daemon for security management.

2. Check that the super daemon process is enabled.
[Root @ rootbug ~] # Chkconfig -- list | grep xinetd
Xinetd
0: off 1: off 2: off 3: on 4: on 5: on 6: off
You can see whether xinetd is started when it is started. If other processes are hosted under the super daemon, this command can also list their startup status.
If not, you can set boot start.
[Root @ rootbug ~] # Chkconfig -- level 2345 xinetd on

3. Configure General Service hosting to super daemon
(1) The rsync service is used as an example.
[Root @ rootbug ~] # Vim/etc/xinetd. d/rsync ------- if the xinetd directory does not contain rsync, use vim to create a new one.

Service rsync -- service name
{
Disable = yes -- disable is equal to yes, indicating that this service is disabled
Socket_type = stream -- tcp Connection Mechanism
Wait = no -- do not wait. A large number of connections can be performed simultaneously.
User = root -- start the service as root
Server =/usr/bin/rsync -- defines the location of your rsync Service Execution File
Server_args = -- daemon -- service parameter. man rsync can check this parameter, indicating that rsync runs as a daemon.
Log_on_failure + = USERID -- when a logon error occurs, your user ID is recorded.
}

(2) then stop the previous rsync service and enable the super daemon process.
[Root @ rootbug ~] #/Etc/init. d/rsync stop
[Root @ rootbug ~] #/Etc/init. d/xinetd start

(3) drag ssh to super daemon for management
[Root @ rootbug ~] # Vim/etc/xinetd. d/ssh -- create a file and write the content above
Each parameter is separated by a tab. spaces are required on both sides of the equal sign.
Service ssh
{
Disable = no
Socket_type = stream
Protocol = tcp
Wait = no
User = root
Server =/usr/sbin/sshd
Server_args =-I
}

[Root @ rootbug ~] #/Etc/init. d/sshdstop -------- disable the previous service
[Root @ rootbug ~] #/Etc/init. d/xinetdrestart --------- start the super daemon process
[Root @ rootbug ~] # Netstat-ntlup | grep: 22
Tcp 0 00.0.0.0: 22 0.0.0.0: * LISTEN 8182/xinetd -- check your port and you will find that the daemon process is xinetd, not the previous sshd.

Related reading:

Xinetd Security Restriction Bypass Vulnerability http://www.linuxidc.com//Linux/2012-05/61560.htm

RHCA certification RHS333: basic security of services selinux, tcpwrapper and xinetd http://www.linuxidc.com//Linux/2012-03/55847.htm

Installation http://www.linuxidc.com//Linux/2011-06/37327.htm for Linux RHEL5 xinetd, vsftpd and telnet

RHCA Tutorial: RHS333-1 Security Basics Tcpwrap and xinetd http://www.linuxidc.com//Linux/2011-04/34650.htm

RHCE notes-xinetd super daemon with TCP Wrappers http://www.linuxidc.com//Linux/2010-12/30723.htm

For more details, go on to page 1: http://www.linuxidc.com/Linux/2013-09/89811p2.htm