I'm trying to lock down my box a little more and I have no need for vsftpd to start. I know how to kill it but it's not in the go script so can I stop it from even starting?

I'm trying to lock down my box a little more and I have no need for vsftpd to start. I know how to kill it but it's not in the go script so can I stop it from even starting?

Do you see it in the process list?

ps -ef | grep ftp | grep -v grep

I see where it is configured in /etc/inetd.conf

 

You need to add two lines to your "go" script

One will comment out the line for the ftp service in the inetd.conf file, the other will ask the inetd process to re-read the file

 

The two lines to be added to the "go" script are:

sed -i "s/^ftp/#ftp/" /etc/inetd.conf

killall -s HUP inetd

 

Joe L.

Would it be easier to just kill the process in the go script?

No, because it is not started until something attempts to connect to the port it is listening on.  It is started dynamically by the inet daemon process.  There usually is nothing running to kill unless an ftp is in progress.

 

Joe L.