Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Disable Unnecessary Services (ZFS Storage Appliance)

Disable any services that are not required to support the operational and management requirements of the platform.

By default, the ZFS storage appliance employs a network secure-by-default configuration whereby nonessential services are disabled. However, based on your security policies and requirements, it might be necessary to enable or disable additional services. Do not disable any of the NFS, iSCSI, DNS, IPMP, NTP, or SSH services.

1. Log into the ZFS storage appliance.

   See Log into the ZFS Storage Appliance.

2. Display the list of services supported by the ZFS storage appliance.

   hostname:> configuration services
   

3. Determine if a given service is enabled.

   Replace servicename with the name of a service identified in Step 2.

   hostname:> configuration services servicename get <status>
   

   A service is enabled if the service state parameter returns a value of enabled. For example:

   hostname:> configuration services ndmp get <status>
   <status> = online
   

4. Disable a service that is no longer required.

   Set the service state to disable. For example:

   hostname:> configuration services ndmp disable