FC3 general questions about to stealth Linux

[rantanplan]

Hi,
this are 3 questions.

1. Must the sshd run when i access https:// sites. Does the ssh-client still work when i disable this service ?
2. i wonder if i can clean up my /etc/passwd and delete
some accounts for security reason. I made it already and it looks like anything works.
3. How to stealth my FC3 in the best possible way as internet-client/workstation ?

I read already the 'sticky thread' and will look further for the programs described.

Thank you.

[markkuk]

1. sshd isn't needed to use the ssh client for accessing other machines. https: access uses SSL/TLS protocol, not SSH.
2. Don't touch any system accounts (the ones with UIDs less than 500), or your installed software may break.
3. Disable any services you don't need and set up the firewall with system-config-security.

[ibbo]

You can modift /etc/passwd to disallow logins

so an entry like
root:x:0:0:root:/root:/bin/bash
can become
root:x:0:0:root:/root:/sbin/nologin

Not that you would do this to root (or yourself).

Also take a look at
http://www.cromwell-intl.com/securit...hardening.html

Ibbo

[rantanplan]

@markkuk
But i got only problem for the smmd-user for the mail. I copied the line from the old /etc/password and now there is no error more.

@ibbo
Yes. This is the easier way i think. Thank you. Thanx for the link. I go through it. This will help.

[rantanplan]

Surprise. I screwed up my FC3. Using the graphical manager for user/groups says that my /etc/shadow is not in sync with /etc/passwd. I have copied the original but now i got still strange behaviour from such programs.
As said above. -

Logging in to terminal says : I have no name. There is no name for user-id 501. But i can still login with this user.
I revert the changes that i made but it's still screwed.
So far for my eperiment for a secure FC3.

Is there an solution to go back at default ? (without whole install)

[rantanplan]

Ok. The "I have no name@" problem is solved. Thank you. ;-)
I changed the file permission of /etc/passwd and /etc/group when i copied it back as i was root.
So no one else could read it. Bad things happen.
I changed it with chmod 644. Only for completion. If anyone is interested.
Where i find the trick:
http://www.uwsg.iu.edu/hypermail/lin...12.1/0057.html

Thread ended. :-)