Understand linux services (disable services you don't need)

Source: Internet
Author: User
Tags telnet program
Note: I do not know the source of this article, so I have no way to tell you that the transformed URL knows about linux services (disable services you don't need)

Note: I do not know the source of this article, so I cannot tell you the URL of the transformation.

Understand linux services (disable services you don't need)

Understanding linux services
Read the Fedora service management guide first. Learn about services/daemons, runlevels, and various tools for managing services (sevices.
You can use the chkonfig or ntsysv command under the command line to manage services, or use the system-config-services command with a graphical user interface. GNOME User: System-> Management-> server Settings-> Services.

--------------------------------------------------------------------------------
Introduction to a single service
Now we will introduce the functions of various services included in Fedora Core 6 and provide suggestions for use. This is not a detailed list.
Be careful: Do not close services that you are not sure about or do not know ).
Do not close the following services (unless you have good reasons ):
Acpid, haldaemon, messagebus, klogd, network, syslogd
Are you sure you want to modify the runtime level 3 and 5.
--------------------------------------------------------------------------------

NetworkManager, NetworkManagerDispatcher
NetworkManager is a background process that automatically switches network connections. Many laptop users need to enable this function, which enables you to switch between a wireless network and a wired network. Most desktop users should disable the service. Some DHCP users may need to enable it.

Acpid
The ACPI (Advanced Configuration and Power Interface) service is a Power management Interface. We recommend that you enable it for all notebook users. Some servers may not need acpi. Common operations supported include: "Power Switch", "battery monitoring", "notebook Lid switch", "laptop display brightness", "sleep", "Hanging Up", and so on.

Anacron, atd, cron
There is a small difference between these scheduling programs. We recommend that you enable cron. if your computer runs for a long time, you should enable it. For servers, you should have a better understanding of which scheduler should be enabled. In most cases, atd and anacron should be disabled for laptops/desktops. Note: anacron is required for executing some tasks, such as cleaning/tmp or/var.

Apmd
Some laptops and old hardware use apmd. If your computer supports acpi, you should disable apmd. If acpi is supported, the work of apmd will be completed by acpi.

Autofs
This service automatically mounts removable storage (such as a USB hard disk ). If you use mobile media (such as mobile hard disks and USB disks), we recommend that you enable this service.

Avahi-daemon, avahi-dnsconfd
Avahi is the implementation of zeroconf protocol. It can discover zeroconf-based devices and services in a LAN without DNS services. It is the same as mDNS. Disable it unless you have compatible devices or services that use the zeroconf protocol. I disabled it.

Bluetooth, hcid, hidd, sdpd, dund, pand
Bluetooth is used for wireless portable devices (non-wifi, 802.11 ). Many laptops provide Bluetooth support. There are Bluetooth mouse, Bluetooth headset, and mobile phones that support Bluetooth. Many people do not have Bluetooth devices or services related to Bluetooth, so they should be disabled. Other Bluetooth-related services include: hcid to manage all visible Bluetooth devices, hidd to provide support for input devices (keyboard, mouse), and dund to connect to the network through Bluetooth dialing, pand allows you to connect to Ethernet via Bluetooth.

Capi
It is only useful for users who use ISDN devices. Most users should close it.

Cpuspeed
This service can dynamically adjust the CPU frequency during operation to save energy (power ). Many laptops support this feature, and more desktops now support this feature. If your CPU is: pew.m, Centrino, AMD PowerNow, Transmetta, Intel SpeedStep, Athlon-64, Athlon-X2, one of Intel Core 2, you should turn it on. If you want your CPU to run at a fixed frequency, disable it.

Cron
See anacron.

Cupsd, cups-config-daemon
Printer problems. If you have a CUPS-compatible printer driven in Fedora, you should enable it.

Dc_client, dc_server
The disk cache (Distcache) is used for distributed session cache. It is mainly used for SSL/TLS servers. It can be used by Apache. Most desktops should close it.

Dhcdbd
This is an interface for the guest system to control DHCP. The default off status can be retained.

Diskdump, netdump
Diskdump is used to help debug kernel crashes. After the kernel crashes, it will save a "dump" file for analysis. The Netdump function is similar to Diskdump, but it can be stored over the network. Unless you are diagnosing kernel-related issues, they should be disabled.

Dund
See bluetooth.

Firstboot
This service is unique to the installation process of Fedora. It only needs to execute a specific task once when it is started for the first time after installation. It can be disabled.

Gpm
Terminal mouse pointer support (no graphical interface ). If you do not use a text terminal (CTRL-ALT-F1, F2..), close it. However, I enable it at runtime level 3 and disable it at runtime level 5.

Hidd
See bluetooth.

Maid, hpiod, hpssd
HP printer support is available in Linux, including Inkjet, DeskJet, OfficeJet, Photosmart, Business InkJet, and some LaserJet printers. This is the product of HP Linux Printing Project sponsored by HP. If you have a compatible printer, enable it.

Iptables
It is a Linux standard firewall (software firewall ). If you directly connect to the Internet (such as cable, DSL, T1), we recommend that you enable it. If you use a hardware firewall (such as D-Link, Netgear, and Linksys), you can disable it. We strongly recommend that you enable it.

Ip6tables
If you do not know whether you are using IPv6, it is generally not used. This service is a software firewall for IPv6. Most users should close it. Read here to learn how to disable IPv6 Ora's IPv6 support.

Irda, irattach
IrDA provides communication support between infrared devices (laptops, PDA's, mobile phones, calculators, and so on. Most users should close it.

Irqbalance
In a multi-processor system, enabling this service improves system performance. Most people do not use a multi-processor system, so disable it. But I don't know how it works on the multi-core CPU's or hyper-threading CPU's system. Disabling it in a single CPU system should not cause problems.

Isdn
This is an Internet access method. Unless you use ISDN cat to access the Internet, you should disable it.

Kudzu
This service performs hardware detection and configuration. If you change the hardware or need to detect hardware changes, enable it. However, most desktops and servers can be shut down and started only when needed.

Lm_sensors
This service can detect the value of the sensor device on the motherboard or the status of specific hardware (usually used in laptops ). You can use it to view the real-time status of your computer and understand its health status. It is popular among GKrellM users. View the lm_sensors homepage for more information. We recommend that you disable it for no special reason.

Mctrans
If you use SELinux, enable it. SELinux is enabled for Fedora Core by default.

Mdmonitor
This service is used to monitor Software RAID or LVM information. It is not a critical service. you can disable it.

Mdmpd
This service is used to monitor Multi-Path devices (this type of storage devices can be accessed by more than one controller or method ). It should be disabled.

Messagebus
This is the Linux IPC (Interprocess Communication) service. Specifically, it interacts with tranquility and is an important system service. We strongly recommend that you enable it.

Netdump
See diskdump.

Netplugd
Netplugd is used to monitor network interfaces and execute specified commands when the interface status changes. We recommend that you keep the default off status.

Netfs
This service is used to automatically mount shared file spaces in the network when the system starts, such as NFS and Samba. If you connect to another server in the Lan and share files, enable it. Most desktop and notebook users should disable it.

Nfs, nfslock
This is a standard file sharing method for Unix/Linux/BSD operating systems. Disable it unless you want to share data in this way.

Ntpd
The service automatically updates the system time over the Internet. If you can maintain a permanent internet connection, we recommend that you enable it, but it is not necessary.

Pand
See bluetooth.

Pcscd
The service supports smart cards (the same size as small chips embedded in credit cards and identification cards) and smart card readers. If you do not have a card reader device, disable it.

Portmap
This service is complementary to NFS (file sharing) and NIS (verification. Disable NFS or NIS unless you use the NFS or NIS service.

Readahead_early, readahead_later
This service provides performance by pre-loading specific applications to the memory. If you want the program to start faster, enable it.

Restorecond
Used to monitor SELinux and reload the correct file context (file contexts ). It is not necessary, but it is strongly recommended to enable it if you use SELinux.

Rpcgssd, rpcidmapd, rpcsvcgssd
Used for NFS v4. Disable NFS v4 unless you need it or use it.

Sendmail
Unless you manage an email server or want to transmit or support a shared IMAP or POP3 service in the LAN. Most people do not need an email transmission proxy. If you use a web page (hotmail/yahoo/gmail) or a mail sending and receiving program (such as Thunderbird, Kmail, Evolution, etc.), send and receive programs. You should close it.

Smartd
The SMART Disk Monitoring service is used to monitor and predict Disk failures or Disk problems (prerequisite: the Disk must support SMART ). Most desktop users do not need this service, but we recommend that you enable it, especially for servers.

Smb
The SAMBA service is required for file sharing between Linux and Windows. If a Windows user needs to access a file on Linux, enable it. View how to configure Samba under Fedora Core 6.

Sshd
SSH allows other users to log on to your system and execute programs. the user can be a network or remote user. Enabling It has potential security risks. If you do not need to log on from another machine or remotely, disable it.

Xinetd
(This service may not be installed by default) it is a special service. It can start multiple services according to the requests received by a specific port. For example, a typical telnet program connects to port 23. If a telent request is detected by xinetd on port 23, xinetd starts the telnetd service to respond to the request. You can enable it for ease of use. Run chkconfig -- list and check the output related to xinetd to find out which services are managed by xinetd.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.