Hi Shamus

Not sure what that is but I cant see noload => 
coreres_pjsip_authenticator_digest.so in the list?

Regards
Michael Knill

On 15/4/18, 4:16 am, "Shamus Rask" <sha...@srask.ca> wrote:

    I’m running a default installation of Asterisk 13 on Ubuntu 16.04. 
Currently trying to “skinnify” Asterisk to minimize the attack surface and 
resource usage.
    
    In /etc/asterisk, I currently see the following:
    total 16
    drwxr-xr-x  3 asterisk asterisk 4096 Apr 14 14:11 .
    drwxr-xr-x 96 root     root     4096 Apr 13 12:58 ..
    drwxrwx---  3 root     root     4096 Apr 14 12:48 default
    -rw-r-----  1 asterisk asterisk 3932 Apr 14 14:04 modules.conf
    
    I’ve purposefully removed all other .conf files. When I reload Asterisk, it 
is still showing that all modules are being loaded:
    server*CLI> module show like res_pjsip
    Module                         Description                              Use 
Count  Status      Support Levelres_pjsip.so                   Basic SIP 
resource                       29         Running              
coreres_pjsip_acl.so               PJSIP ACL Resource                       0   
       Running              coreres_pjsip_authenticator_digest.so PJSIP 
authentication resource            0          Running              
coreres_pjsip_caller_id.so         PJSIP Caller ID Support                  0   
       Running              core
    
    What am I doing wrong? Why is Asterisk ignoring all of my noloads?
    
    In modules.conf, I have the following:
    [modules]
    autoload=yes
    
    ; Channel Event Logging modules are not used so removed
    noload => cel_custom.so
    noload => cel_manager.so
    noload => cel_odbc.so
    noload => cel_sqlite3_custom.so
    noload => app_celgenuserevent.so
    
    ; PJSIP is disabled until we are ready to use it
    noload => res_pjproject.so
    noload => res_pjsip.so
    noload => res_pjsip_acl.so
    noload => res_pjsip_authenticator_digest.so
    noload => res_pjsip_caller_id.so
    noload => res_pjsip_config_wizard.so
    noload => res_pjsip_dialog_info_body_generator.so
    noload => res_pjsip_diversion.so
    noload => res_pjsip_dlg_options.so
    noload => res_pjsip_dtmf_info.so
    noload => res_pjsip_empty_info.so
    noload => res_pjsip_endpoint_identifier_anonymous.so
    noload => res_pjsip_endpoint_identifier_ip.so
    noload => res_pjsip_endpoint_identifier_user.so
    noload => res_pjsip_exten_state.so
    noload => res_pjsip_header_funcs.so
    noload => res_pjsip_history.so
    noload => res_pjsip_logger.so
    noload => res_pjsip_messaging.so
    noload => res_pjsip_mwi.so
    noload => res_pjsip_mwi_body_generator.so
    noload => res_pjsip_nat.so
    noload => res_pjsip_notify.so
    noload => res_pjsip_one_touch_record_info.so
    noload => res_pjsip_outbound_authenticator_digest.so
    noload => res_pjsip_outbound_publish.so
    noload => res_pjsip_outbound_registration.so
    noload => res_pjsip_path.so
    noload => res_pjsip_pidf_body_generator.so
    noload => res_pjsip_pidf_digium_body_supplement.so
    noload => res_pjsip_pidf_eyebeam_body_supplement.so
    noload => res_pjsip_publish_asterisk.so
    noload => res_pjsip_pubsub.so
    noload => res_pjsip_refer.so
    noload => res_pjsip_registrar.so
    noload => res_pjsip_registrar_expire.so
    noload => res_pjsip_rfc3326.so
    noload => res_pjsip_sdp_rtp.so
    noload => res_pjsip_send_to_voicemail.so
    noload => res_pjsip_session.so
    noload => res_pjsip_sips_contact.so
    noload => res_pjsip_t38.so
    noload => res_pjsip_transport_management.so
    noload => res_pjsip_transport_websocket.so
    noload => res_pjsip_xpidf_body_generator.so
    noload => func_pjsip_aor.so
    noload => func_pjsip_contact.so
    noload => func_pjsip_endpoint.so
    
    ; ARI needs to go to unless I have a need for it
    noload => res_ari.so
    noload => res_ari_applications.so
    noload => res_ari_asterisk.so
    noload => res_ari_bridges.so
    noload => res_ari_channels.so
    noload => res_ari_device_states.so
    noload => res_ari_endpoints.so
    noload => res_ari_events.so
    noload => res_ari_model.so
    noload => res_ari_playbacks.so
    noload => res_ari_recordings.so
    noload => res_ari_sounds.so
    
    ; We are not using Homer so it is disabled
    noload => res_hep.so
    noload => res_hep_pjsip.so
    noload => res_hep_rtcp.so
    
    ; Other resource modules currently not needed
    noload => res_speech.so
    noload => res_phoneprov.so
    noload => res_ael_share.so
    noload => res_adsi.so
    noload => res_smdi.so
    noload => res_fax.so
    noload => res_fax_spandsp.so
    noload => res_stun_monitor.so
    noload => res_pktccops.so
    
    ; PBX modules currently not needed
    noload => pbx_ael.so
    noload => pbx_dundi.so
    
    ; Channel modules currently not needed
    noload => chan_oss.so
    noload => chan_mgcp.so
    noload => chan_skinny.so
    noload => chan_phone.so
    noload => chan_agent.so
    noload => chan_unistim.so
    noload => chan_alsa.so
    noload => chan_iax2.so
    
    ; Other application modules currently not needed
    noload => app_nbscat.so
    noload => app_amd.so
    noload => app_mp3.so
    noload => app_minivm.so
    noload => app_zapateller.so
    noload => app_ices.so
    noload => app_sendtext.so
    noload => app_speech_utils.so
    noload => app_flash.so
    noload => app_getcpeid.so
    noload => app_setcallerid.so
    noload => app_adsiprog.so
    noload => app_forkcdr.so
    noload => app_sms.so
    noload => app_morsecode.so
    noload => app_url.so
    noload => app_alarmreceiver.so
    noload => app_dahdiras.so
    noload => app_senddtmf.so
    noload => app_test.so
    noload => app_externalivr.so
    noload => app_image.so
    noload => app_festival.so
    
    ; Using SQLight3 so get rid of all the others
    noload => cdr_csv.so
    noload => cdr_custom.so
    noload => cdr_manager.so
    noload => cdr_syslog.so
    
    
------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    _______________________________________________
    Astlinux-users mailing list
    Astlinux-users@lists.sourceforge.net
    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    
    Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to