[Spacewalk-list] Is the rhnsd service required to be able to communicate with a spacewalk server?

[Robert Paschedag]

It would be of interest for me, why this should be shut down? It shouldn't listen for connections. So what security concerns are there?

⁣sent from my mobile device​


-------- Originale Nachricht --------
Von: William Hongach <william.hongach at marist.edu>
Gesendet: Thu Jun 13 20:15:47 GMT+02:00 2019
An: "spacewalk-list at redhat.com" <spacewalk-list at redhat.com>
Betreff: Re: [Spacewalk-list] Is the rhnsd service required to be able to communicate with a spacewalk server?

Hello,

It is the service (or related timer) that runs rhn_check based on the interval specified in /etc/sysconfig/rhn/rhnsd.  This is how Spacewalk clients check in with the server for queued tasks.  There should be a man page available for rhnsd.

If you shut it down, the client will not check in with the server, unless rhn_check is run manually or via a scheduled task like cron.  However, if you run osad (I do not) then I do not believe you need it since that is a different model.  But your security team may also flag osad like they flagged rhnsd.

From: spacewalk-list-bounces at redhat.com <spacewalk-list-bounces at redhat.com> On Behalf Of Paul Greene
Sent: Thursday, June 13, 2019 1:56 PM
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Is the rhnsd service required to be able to communicate with a spacewalk server?

What is the actual function of rhnsd? What is actually being lost if its not running?

On Thu, Jun 13, 2019 at 1:02 PM William Hongach <William.Hongach at marist.edu<mailto:William.Hongach at marist.edu>> wrote:
Hello,

I suppose you could run rhn_check out of cron if you did not want rhnsd to schedule it.

From: spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com> <spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>> On Behalf Of Paul Greene
Sent: Thursday, June 13, 2019 12:31 PM
To: Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
Subject: [Spacewalk-list] Is the rhnsd service required to be able to communicate with a spacewalk server?

Our security group is telling me, based on a Nessus scan, that I need to disable the rhnsd service.

Is the rhnsd service required to be able to communicate with a spacewalk server?
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list


------------------------------------------------------------------------

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list