ipfilter, and some remnants of a Project Fifo install from last summer that
were running but not in use, - chunter and epmd (but after disabling with
svcadm, the gz still tests as vulnerable).

svcs -a
STATE          STIME    FMRI
legacy_run     Nov_06   lrc:/etc/rc2_d/S20sysetup
legacy_run     Nov_06   lrc:/etc/rc2_d/S47pppd
legacy_run     Nov_06   lrc:/etc/rc2_d/S81dodatadm_udaplt
legacy_run     Nov_06   lrc:/etc/rc2_d/S89PRESERVE
online         Nov_06   svc:/system/svc/restarter:default
online         Nov_06   svc:/network/datalink-management:default
online         Nov_06   svc:/network/ip-interface-management:default
online         Nov_06   svc:/milestone/name-services:default
online         Nov_06   svc:/system/filesystem/root:default
online         Nov_06   svc:/system/cryptosvc:default
online         Nov_06   svc:/system/boot-archive:default
online         Nov_06   svc:/network/loopback:default
online         Nov_06   svc:/system/scheduler:default
online         Nov_06   svc:/system/filesystem/usr:default
online         Nov_06   svc:/system/device/local:default
online         Nov_06   svc:/milestone/devices:default
online         Nov_06   svc:/network/ipsec/ipsecalgs:default
online         Nov_06   svc:/system/keymap:default
online         Nov_06   svc:/system/auditset:default
online         Nov_06   svc:/system/early-manifest-import:default
online         Nov_06   svc:/system/pfexec:default
online         Nov_06   svc:/system/filesystem/smartdc:default
online         Nov_06   svc:/system/filesystem/minimal:default
online         Nov_06   svc:/system/rmtmpfiles:default
online         Nov_06   svc:/network/ipsec/policy:default
online         Nov_06   svc:/system/resource-mgmt:default
online         Nov_06   svc:/system/hostid:default
online         Nov_06   svc:/system/power:default
online         Nov_06   svc:/system/sysevent:default
online         Nov_06   svc:/system/logadm-upgrade:default
online         Nov_06   svc:/network/npiv_config:default
online         Nov_06   svc:/system/rbac:default
online         Nov_06   svc:/system/smartdc/config:default
online         Nov_06   svc:/system/manifest-import:default
online         Nov_06   svc:/system/coreadm:default
online         Nov_06   svc:/network/physical:default
online         Nov_06   svc:/system/identity:domain
online         Nov_06   svc:/network/iptun:default
online         Nov_06   svc:/network/lldp/server:default
online         Nov_06   svc:/system/identity:node
online         Nov_06   svc:/system/picl:default
online         Nov_06   svc:/milestone/single-user:default
online         Nov_06   svc:/network/initial:default
online         Nov_06   svc:/network/netmask:default
online         Nov_06   svc:/system/filesystem/local:default
online         Nov_06   svc:/network/service:default
online         Nov_06   svc:/system/smartdc/metadata:default
online         Nov_06   svc:/system/sysidtool:net
online         Nov_06   svc:/network/shares/group:zfs
online         Nov_06   svc:/system/dumpadm:default
online         Nov_06   svc:/system/boot-archive-update:default
online         Nov_06   svc:/system/cron:default
online         Nov_06   svc:/network/shares/group:default
online         Nov_06   svc:/network/iscsi/initiator:default
online         Nov_06   svc:/network/routing-setup:default
online         Nov_06   svc:/network/rpc/bind:default
online         Nov_06   svc:/system/name-service-cache:default
online         Nov_06   svc:/system/sysidtool:system
online         Nov_06   svc:/milestone/sysconfig:default
online         Nov_06   svc:/network/inetd:default
online         Nov_06   svc:/system/system-log:default
online         Nov_06   svc:/system/utmp:default
online         Nov_06   svc:/network/sendmail-client:default
online         Nov_06   svc:/network/ntp:default
online         Nov_06   svc:/network/dns/multicast:default
online         Nov_06   svc:/network/ipfilter:default
online         Nov_06   svc:/milestone/network:default
online         Nov_06   svc:/system/auditd:default
online         Nov_06   svc:/system/console-login:default
online         Nov_06   svc:/system/console-login:ttya
online         Nov_06   svc:/system/console-login:ttyb
online         Nov_06   svc:/system/vtdaemon:default
online         Nov_06   svc:/system/console-login:vt2
online         Nov_06   svc:/system/console-login:vt5
online         Nov_06   svc:/system/console-login:vt4
online         Nov_06   svc:/system/console-login:vt3
online         Nov_06   svc:/system/console-login:vt6
online         Nov_06   svc:/network/ssh:default
online         Nov_06   svc:/system/fmd:default
online         Nov_06   svc:/network/smtp:sendmail
online         Nov_06   svc:/milestone/multi-user:default
online         Nov_06   svc:/system/intrd:default
online         Nov_06   svc:/milestone/multi-user-server:default
online         Nov_06   svc:/system/boot-config:default
online         Nov_06   svc:/system/zones:default
online         Nov_06   svc:/system/smartdc/init:default
online         Nov_06   svc:/system/smartdc/vmadmd:default
online         Jan_09   svc:/smartos/setup:default




On Tue, Apr 8, 2014 at 6:04 PM, Chris Ferebee <[email protected]> wrote:

> What SSL services are you running in the GZ? Note that none of this
> applies to SSH.
>
> Best,
> Chris
>
>
> Am 09.04.2014 um 00:02 schrieb Tim Boudreau <[email protected]>:
>
> I have one machine with the global zone exposed on the internet;  the test
> here - http://filippo.io/Heartbleed/ - shows it to be vulnerable.
>
> Is there a newer USB stick image with an openssl without this problem?
>
> -Tim
>
> *smartos-discuss* | 
> Archives<https://www.listbox.com/member/archive/184463/=now>
> <https://www.listbox.com/member/archive/rss/184463/24804823-eebbfb1e> |
> Modify <https://www.listbox.com/member/?&;> Your Subscription
> <http://www.listbox.com/>
>
>
> *smartos-discuss* | 
> Archives<https://www.listbox.com/member/archive/184463/=now>
> <https://www.listbox.com/member/archive/rss/184463/24549504-c4bff9d3> |
> Modify<https://www.listbox.com/member/?&;>Your Subscription
> <http://www.listbox.com>
>



-- 
http://timboudreau.com



-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to