barophobia wrote:
I've recently installed FC3 sans-gui (although there still is a
basic
X11 gui for some reason) and I would like to turn off all the unneeded
daemons on my system. I'm coming to the list because I'm not familiar
enough with the system to know exactly which daemons can be turned off
and which cannot. I've already made a *few* changes but not as nearly
as many as I'd like.
What's your principal concern here? Security or saving memory? If it's
security, once you're sure you don't need a service, look into
uninstalling it.
Firstly, switch to run-level 3. In /etc/inittab, change the line that
reads
id:5:initdefault:
to
id:3:initdefault:
That will stop X starting.
Here are some specifics about the servre that should help
determining
the needed daemons. (The output from chkconfig --list can be found at
the end of this email.)
* I don't need a gui at all.
* I don't need printing.
* I have two harddrives connected via IDE. (No SCSI, no RAID.)
* I will be doing web development using Apache/PHP/MySQL
* SNMP will be used
* All things relating to email will be used.
* FTP will be used.
...presumably inwards...
Depending on what you're developing, I'd recommend stopping this
computer serving to the Internet until you've got the stuff debugged,
and checked for logic holes...
I've sorted the list of services:
haldaemon 0:off 1:off 2:off 3:on 4:on 5:on
6:off
messagebus 0:off 1:off 2:off 3:on 4:on 5:on 6:off
Keep these:
these days, they count as Fedora internals.
mysqld 0:off 1:off 2:off 3:on 4:off 5:off
6:off
httpd 0:off 1:off 2:off 3:on 4:off 5:off 6:off
vsftpd 0:off 1:off 2:off 3:on 4:off 5:off 6:off
snmpd 0:off 1:off 2:off 3:on 4:off 5:off 6:off
snmptrapd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
sendmail 0:off 1:off 2:on 3:on 4:on 5:on 6:off
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Somewhat
necessary for your projects.
saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Possibly needed for your projects.
atd 0:off 1:off 2:off 3:on 4:on 5:on
6:off
anacron 0:off 1:off 2:on 3:on 4:on 5:on 6:off
syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off
xinetd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
psacct 0:off 1:off 2:off 3:off 4:off 5:off 6:off
All good
ideas to keep, although not essential. They keep your box
Unix-like.
sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
A good idea anyway: essential if you ever want remote access.
gpm 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Might be useful if you do much on the console...
dc_client 0:off 1:off 2:off 3:off 4:off 5:off
6:off
dc_server 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Distributed
cache? What's the point of that?
spamassassin 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Does "things related to e-mail" include SpamAssasin? Will you be reading
normal Internet e-mail on this box, and if so, why? If it's a
web-*development* box, you probably only want e-mail related to the
project, and sent to specific, non-published addresses.
cups 0:off 1:off 2:off 3:off 4:off 5:off
6:off
cups-config-daemon 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Yes,
you shouldn't need these...
xfs 0:off 1:off 2:on 3:on 4:on 5:on
6:off
apmd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
acpid 0:off 1:off 2:off 3:on 4:on 5:on 6:off
nscd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
mDNSResponder 0:off 1:off 2:off 3:on 4:on 5:on 6:off
Probably
don't need these.
irqbalance 0:off 1:off 2:off 3:on 4:on 5:on 6:off
Only helps on SMP.
irda 0:off 1:off 2:off 3:off 4:off 5:off
6:off
lm_sensors 0:off 1:off 2:on 3:on 4:on 5:on 6:off
microcode_ctl 0:off 1:off 2:off 3:off 4:off 5:off 6:off
isdn 0:off 1:off 2:on 3:on 4:on 5:on 6:off
bluetooth 0:off 1:off 2:off 3:off 4:off 5:off 6:off
cpuspeed 0:off 1:on 2:on 3:on 4:on 5:on 6:off
Unless
you've got the hardware, you probably don't want these.
pcmcia 0:off 1:off 2:on 3:on 4:on 5:on
6:off
netplugd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
NetworkManager 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nifd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
Not
appropriate for servers (unless it's a laptop used as a server).
smb 0:off 1:off 2:off 3:off 4:off 5:off
6:off
winbind 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Unless you
*want* Windows file sharing...
nfslock 0:off 1:off 2:off 3:on 4:on 5:on
6:off
rpcsvcgssd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
ypbind 0:off 1:off 2:off 3:off 4:off 5:off 6:off
nfs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
portmap 0:off 1:off 2:off 3:on 4:on 5:on 6:off
autofs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
rpcgssd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
rpcidmapd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
Unless you
*want* NFS/NIS (or RPC-based programs: I suppose you might,
depending on exactly what you're doing).
ntpd 0:off 1:off 2:off 3:on 4:off 5:on 6:off
Keep your logs sane: get the right time in them.
diskdump 0:off 1:off 2:off 3:off 4:off 5:off
6:off
netdump 0:off 1:off 2:off 3:off 4:off 5:off 6:off
If you wanted
this, you'd know.
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Probably a good idea anyway. You need *one* of:
rhnsd 0:off 1:off 2:off 3:on 4:on 5:on
6:off
yum 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Which of them
is up to you.
readahead_early 0:off 1:off 2:off 3:off 4:off 5:on
6:off
readahead 0:off 1:off 2:off 3:off 4:off 5:on 6:off
Doesn't
make much difference.
mailman 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Only if your development includes mailing lists.
mdmpd 0:off 1:off 2:off 3:off 4:off 5:off
6:off
mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Only if
you're using LVM and/or RAID.
vncserver 0:off 1:off 2:off 3:off 4:off 5:off 6:off
If you don't want X, you don't want this.
kudzu 0:off 1:off 2:off 3:on 4:on 5:on
6:off
smartd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Help keep
your hardware sane.
Hope this helps,
James.
--
E-mail address: james | I suppose if one has to go mad, slowly is the way to
@westexe.demon.co.uk | go. You wouldn't want to rush going mad, you might
| miss some of the good bits.
| -- Paul Tomblin