Re: [cobalt-security] finger on/off?

[Fabrice Prémel <fabrice@xxxxxxxxxx>]

On Mon, 25 Sep 2000 13:47:03 -0700, cobalt-security@xxxxxxxxxxxxxxx 
wrote:
>Fabrice,
>
>Merci for responding.  I guess my root question is:
>
>>is< finger turned on by default with a new RaQ3, or >not?<.

It was not on our RaQ3. And I don't think it's ever on by default.

>
>When I did this:
>
>    ps aux | fgrep finger
>
>it only revealed this:
>
>    root     17110  0.0  0.0  1160  408 pts/2    S    13:45   0:00 
>fgrep
>finger

So far so good : it shows that it doesn't run standalone.

>
>and when I did this:
>
>    fgrep finger /etc/services
>
>I got this:
>
>    finger          79/tcp
>    cfinger         2003/tcp                        # GNU Finger
>

This is correct.

>The later output would make me worried that finger is indeed on?  It

/etc/services just make corespondances between name and port numbers, 
à la DNS. I.e. you can type :
telnet localhost mail
instead of :
telnet localhost 25.

But having something in /etc/services does _not_ mean it's on.
If it's on, it's standalone or in inetd.

>also reveals another question... what is this "GNU finger" ...?!

Another version of finger, slightly different, IIRC. Best is to turn 
off both.

>
>Merci encore une fois,
>

Aucun soucis,

Fabrice Prémel.