Visit Our UNIX and Linux User Community

Full Discussion: Disable snmpd for good
Operating Systems AIX Disable snmpd for good Post 302784535 by MichaelFelt on Friday 22nd of March 2013 11:53:34 AM
Old 03-22-2013
I would run chmod 0 on the actual programs:
Code:
# ls -l /usr/sbin/snmpd*
lrwxrwxrwx 1 root system      9 Oct 18 18:59 /usr/sbin/snmpd -> snmpdv3ne
-rwxr-x--- 1 root system 363992 Oct  2 21:51 /usr/sbin/snmpd64v1
-rwxr-x--- 1 root system 335192 Oct  2 21:52 /usr/sbin/snmpdv1
-rwxr-x--- 1 root system 336148 Nov 16  2011 /usr/sbin/snmpdv3ne

better would be to customize aixpert to use
Code:
fpm

to do that for you.

p.s., you could move the originals away and write a script/program to tell you who/what is trying to start it. I would expect it to be something super-user powered.

As you have spoken about RBAC check that noone has authorization to start it anyway.

Code:
michael@x054:[/home/michael]lssecattr -c /usr/sbin/snmpdv3ne
/usr/sbin/snmpdv3ne accessauths=aix.network.daemon,ALLOW_OWNER innateprivs=PV_NET_PORT,PV_DAC_R,PV_DAC_W,PV_DAC_X,PV_DAC_GID,PV_DAC_UID,PV_PROC_RAC secflags=FSF_EPS

This User Gave Thanks to MichaelFelt For This Post:
 
Test Your Knowledge in Computers #874
Difficulty: Medium
A programming language is homoiconic if a program written in it can be manipulated as data using the language, and thus the program's internal representation can be inferred just by reading the program itself.
True or False?

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

snmpd daemon error

Good day I always find these error messages on /var/adm/messages it appear every 15 mn , does any body know how to stop these messages without stopping the daemon , i tried to restart the daemon by uising Kill -HUP 332 please find below the error messages that appear always in... (1 Reply)
Discussion started by: itsgeorge
1 Replies

2. AIX

snmpd modification problem

Hi Gurus, I am relatively new in AIX. I have a problem in modifying the community string in snmpd. I have edited the /etc/snmpd.conf file and changed the default community name 'public' to new one (P@@$w0rd). When I tried to query my aix server with the new string , it is not giving any... (1 Reply)
Discussion started by: helloajith
1 Replies

3. UNIX for Dummies Questions & Answers

mrtg+snmpd count traffic

i just wonder how to count total traffic and traffic on specified ports (e.g. 192.168.0.1:139 and etc.. ). How can it be done? (FreeBSD 6.2 i386) Thx. (5 Replies)
Discussion started by: hachik
5 Replies

4. Linux

Snmpd

Hello to all. For setting my MRTG i want get snmp-info with LAN interface eth0 but information about snmpd daemon very small :( (0 Replies)
Discussion started by: jess_t03
0 Replies

5. Solaris

snmpd manager question

Solaris 8 I have a question about snmpd. My software is running on one box. This box has 2 snmp managers. Is it possible to configure snmpd on my software box such that only one of the managers can perform snmpsets? I want my *redundant* snmp manager only to be able receive traps and do... (1 Reply)
Discussion started by: jalburger
1 Replies

6. HP-UX

SNMPD: need a little help.

Hi there all, I am running here an HP UX 11i v1. I got snmpd running here now. But how do I configure it so it also shows the HD's and swap and RAM's? So I can get the info back to Solarwinds Orion? All I get now is network card status. I want as many info as posible.. Thanx and... (0 Replies)
Discussion started by: draco
0 Replies

7. Shell Programming and Scripting

How to disable Enable/Disable Tab Key

Hi All, I have bash script, so what is sintax script in bash for Enable and Disable Tab Key. Thanks for your help.:( Thanks, Rico (1 Reply)
Discussion started by: carnegiex
1 Replies

8. Infrastructure Monitoring

AIX - snmpd version

Hi, I have a P595 server with AIX 5.3 and i need to know what version of snmpd i use on this: Example: On solaris i use Net-snmpd 5.4.2.1 (netsnmp-5.4.2.1-sol9-sparc-local) because i can see the package. How can i see what snmpd package is installed on the AIX? Thanks... (3 Replies)
Discussion started by: anonymouzz
3 Replies

9. Red Hat

SSL/TLS renegotiation DoS -how to disable? Is it advisable to disable?

Hi all Expertise, I have following issue to solve, SSL / TLS Renegotiation DoS (low) 222.225.12.13 Ease of Exploitation Moderate Port 443/tcp Family Miscellaneous Following is the problem description:------------------ Description The remote service encrypts traffic using TLS / SSL and... (2 Replies)
Discussion started by: manalisharmabe
2 Replies

10. Red Hat

Snmpd dying on centos7.1

Hello All, SNMPD dying after 2 mins once it started. Here is the configuration Oct 12 04:43:00 localhost systemd: Starting Simple Network Management Protocol (SNMP) Daemon.... Oct 12 04:43:00 localhost snmpd: dlopen failed: /usr/lib64/libcmaX64.so: cannot open shared object file: No such... (1 Reply)
Discussion started by: shekar777
1 Replies
SNMPCONF(1)							     Net-SNMP							       SNMPCONF(1)

NAME
snmpconf - creates and modifies SNMP configuration files SYNOPSIS
snmpconf [OPTIONS] [fileToCreate] Start with: snmpconf -g basic_setup Or even just: snmpconf DESCRIPTION
snmpconf is a simple Perl script that walks you through setting up a configuration file step by step. It should be fairly straight forward to use. Merely run it and answer its questions. In its default mode of operation, it prompts the user with menus showing sections of the various configuration files it knows about. When the user selects a section, a sub-menu is shown listing of the descriptions of the tokens that can be created in that section. When a description is selected, the user is prompted with questions that construct the configuration line in question. Finally, when the user quits the program any configuration files that have been edited by the user are saved to the local directory, fully commented. A particularly useful option is the -g switch, which walks a user through a specific set of configuration questions. Run: snmpconf -g basic_setup for an example. OPTIONS
-f Force overwriting existing files in the current directory without prompting the user if this is a desired thing to do. -i When finished, install the files into the location where the global system commands expect to find them. -p When finished, install the files into the users home directory's .snmp subdirectory (where the applications will also search for configuration files). -I DIRECTORY When finished, install the files into the directory DIRECTORY. -a Don't ask any questions. Simply read in the various known configuration files and write them back out again. This has the effect of "auto-commenting" the configuration files for you. See the NEAT TRICKS section below. -rall|none Read in either all or none of the found configuration files. Normally snmpconf prompts you for which files you wish to read in. Reading in these configuration files will merge these files with the results of the questions that it asks of you. -R FILE,... Read in a specific list of configuration files. -g GROUPNAME Groups of configuration entries can be created that can be used to walk a user through a series of questions to create an initial configuration file. There are no menus to navigate, just a list of questions. Run: snmpconf -g basic_setup for a good example. -G List all the known groups. -c CONFIGDIR snmpconf uses a directory of configuration information to learn about the files and questions that it should be asking. This option tells snmpconf to use a different location for configuring itself. -q Run slightly more quietly. Since this is an interactive program, I don't recommend this option since it only removes information from the output that is designed to help you. -d Turn on lots of debugging output. -D Add even more debugging output in the form of Perl variable dumps. NEAT TRICKS
snmpconf -g basic_setup Have I mentioned this command enough yet? It's designed to walk someone through an initial setup for the snmpd(8) daemon. Really, you should try it. snmpconf -R /usr/local/snmp/snmpd.conf -a -f snmpd.conf Automatically reads in an snmpd.conf file (for example) and adds comments to them describing what each token does. Try it. It's cool. NOTES
snmpconf is actually a very generic utility that could be easily configured to help construct just about any kind of configuration file. Its default configuration set of files are SNMP based. SEE ALSO
snmpd(8), snmp_config(5), snmp.conf(5), snmpd.conf(5) V5.7.2 25 Feb 2003 SNMPCONF(1)

Featured Tech Videos

All times are GMT -4. The time now is 04:56 AM.
Unix & Linux Forums Content Copyright 1993-2021. All Rights Reserved.
Privacy Policy