Go to main content

Managing System Services in Oracle® Solaris 11.4

Exit Print View

Updated: Febuary 2019
 
 

How to Change a Property Value for an inetd Controlled Service

  1. List the properties for the service.

    Use the -l option of the inetadm command to list all the properties of the specified service. Inspect the current values of the properties.

    $ inetadm -l FMRI
  2. Change a property value.

    Use the -m option of the inetadm command to change the value of a specified property. Specific information about the properties for a service should be covered in the man page associated with the service.

    $ inetadm -m FMRI property-name=value

    To delete a property value, specify an empty value.

    $ inetadm -m svc property=""
  3. Verify that the property value is changed.

    List the properties again to make sure that the appropriate change has occurred.

    $ inetadm -l FMRI
  4. Confirm that the change has taken effect.

    Confirm that the property change has the expected effect.

Example 43  Limiting the Number of Concurrent Processes that are Allowed to Run

This example shows how to limit the number of finger processes that are allowed to run concurrently.

Security best practice recommends limiting the number of processes that are allowed to run concurrently for each system service that is controlled by inetd. In addition, if a service that is controlled by inetd is not needed, disable that service as described in Stopping a Service.

The property to configure to limit the number of processes that are allowed to run concurrently is the max_copies property. The inetadm -p command lists the properties common to all services managed by inetd and their default values. The following example shows only partial output:

$ inetadm -p
NAME=VALUE
...
max_copies=-1
... 

The inetadm -l command lists all the properties of the specified service so that you can inspect the current value of the max_copies property for that service.

$ inetadm -l finger | grep copies
default  max_copies=-1  

Use the -m option of the inetadm command to change the value of the property:

$ inetadm -m finger max_copies=5

Verify that the property value is changed.

$ inetadm -l finger | grep copies
         max_copies=5

Notice that the scope of “default” is no longer displayed for this property.