Author: pollux Date: 2011-09-25 20:35:50 +0000 (Sun, 25 Sep 2011) New Revision: 17287 Modified: hardening/subgoal-daemons.txt Log: Update list, merge by source Modified: hardening/subgoal-daemons.txt ==================================================================--- hardening/subgoal-daemons.txt 2011-09-25 20:28:30 UTC (rev 17286) +++ hardening/subgoal-daemons.txt 2011-09-25 20:35:50 UTC (rev 17287) @@ -18,72 +18,54 @@ To check: aiccu -amanda-server +amanda ample -amule-daemon +amule and apache2 -apache2-mpm-event -apache2-mpm-itk -apache2-mpm-prefork -apache2-mpm-worker -apache2-prefork-dev -apache2-threaded-dev -apache2.2-common apt-cacher-ng archfs asterisk at -atm-tools autofs -autofs-hesiod -autofs-ldap autossh -avahi-autoipd -avahi-daemon -avahi-dnsconfd +avahi avr-evtd -bacula-director-sqlite3 +bacula bandwidthd -bandwidthd-pgsql bcron beanstalkd binkd bip -bird6 +bird bitlbee bluemon -bluez-utils +bluez boa bozohttpd busybox-syslogd c-icap cfengine2 cherokee -clamav-daemon -clamav-freshclam -clamav-milter +clamav clamsmtp collectd -collectd-dbg -conntrackd +conntrack consolekit cpqarrayd cron -crossfire-server +crossfire ctrlproxy cvsd -cyrus-common-2.2 cyrus-imapd-2.2 -cyrus-pop3d-2.2 +cyrus-imapd-2.4 daemon daemontools dancer-ircd dancer-services -dante-server +dante dbndns dbus -dbus-x11 dhis-dns-engine dhis-mx-sendmail-engine dhis-server @@ -91,67 +73,49 @@ djbdns dma dnsproxy -dovecot-common -dovecot-imapd -dovecot-pop3d +dovecot dsyslog dynamips eggdrop ekeyd esmtp exim4 -exim4-base -exim4-daemon-heavy -exim4-daemon-light ez-ipupdate fair fetchmail fldigi -fprobe-ng +fprobe freepops freeradius -ftpd gamin -gammu-smsd -gconf2 -git-daemon-run +gammu +gconf +git gnome-keyring gnome-settings-daemon -gpe-confd -gpe-soundserver gpm gpsd -gw6c +gogoc hal haveged hdapsd hlbr -hobbit httptunnel hybserv ibod icecast2 ident2 -ifcico -ifgate +ifmail ifplugd ifuse -imapproxy -inetutils-ftpd -inetutils-inetd -inetutils-syslogd -inetutils-talkd -inetutils-telnetd +inetutils inn inn2 -inn2-dev -inn2-lfs innfeed inoticoming inputlirc iodine ipband -ipopd ircd-hybrid ircd-irc2 ircd-ircu @@ -159,26 +123,21 @@ iscsitarget isns kannel -kdm kerneloops keynav -keytouch klone -krb5-admin-server -krb5-ftpd -krb5-kdc -krb5-rsh-server -krb5-telnetd -ksysguardd +krb5 +krb5-appl labrea ldm-server leafnode -libchipcard-tools -libdaemon-dev -libdaemon0 +libchipcard +libdaemon libpam-ssh lighttpd +linux-atm linux-igd +linux-ftpd lldpd lnpd lsh-server @@ -194,82 +153,73 @@ mini-httpd minit miredo -miredo-server -mmpongd +mmpong moc mpd mpdscribble -mt-daapd muroard mxallowd -mysql-server +mysql-5.1 nagios-plugins nagios3 nas -nbd-server +nbd net-acct +net-snmp netatalk netplug -network-manager -network-manager-gnome nfdump -nfs-common -nfs-kernel-server +nfs-utils ngetty nginx ngircd notification-daemon notify-osd -nslcd nuttcp obex-data-server oftc-hybrid open-iscsi -openafs-dbserver -openafs-fileserver +openafs openbsd-inetd opencryptoki +openldap +openssh openvas-server p910nd pacemaker pads -pcscd -php5-xdebug -pkspxy +pcsc-lite polipo pommed -portmap portsentry postfix postfix-gld powernowd ppp -prayer-accountd +prayer preload privoxy pvm -pvm-dev quagga radioclk radiusd-livingston randomsound readahead -remctl-server +remctl rlinetd rpld rrdcollect -rsh-redone-server +rsh-redone rsyslog scanbuttond shell-fm -shishi-kdc -silcd -sl-modem-daemon -slapd +shishi +sks +sl-modem sleepd -slony1-bin +slony1 +slony1-2 smcroute -snmpd snmptrapfmt solid-pop3d squid @@ -302,12 +252,13 @@ ttysnoop udev udisks +up-imapproxy upower upstart uptimed usbmuxd uucp -uw-imapd +uw-imap v86d varnish vsftpd @@ -329,10 +280,8 @@ xserver-xephyr xymon yubikey-server-c -zabbix-agent -zabbix-server-mysql -zabbix-server-pgsql -zephyr-server +zabbix +zephyr Non-candidates: