ipfilter, and some remnants of a Project Fifo install from last summer that were running but not in use, - chunter and epmd (but after disabling with svcadm, the gz still tests as vulnerable).
svcs -a STATE STIME FMRI legacy_run Nov_06 lrc:/etc/rc2_d/S20sysetup legacy_run Nov_06 lrc:/etc/rc2_d/S47pppd legacy_run Nov_06 lrc:/etc/rc2_d/S81dodatadm_udaplt legacy_run Nov_06 lrc:/etc/rc2_d/S89PRESERVE online Nov_06 svc:/system/svc/restarter:default online Nov_06 svc:/network/datalink-management:default online Nov_06 svc:/network/ip-interface-management:default online Nov_06 svc:/milestone/name-services:default online Nov_06 svc:/system/filesystem/root:default online Nov_06 svc:/system/cryptosvc:default online Nov_06 svc:/system/boot-archive:default online Nov_06 svc:/network/loopback:default online Nov_06 svc:/system/scheduler:default online Nov_06 svc:/system/filesystem/usr:default online Nov_06 svc:/system/device/local:default online Nov_06 svc:/milestone/devices:default online Nov_06 svc:/network/ipsec/ipsecalgs:default online Nov_06 svc:/system/keymap:default online Nov_06 svc:/system/auditset:default online Nov_06 svc:/system/early-manifest-import:default online Nov_06 svc:/system/pfexec:default online Nov_06 svc:/system/filesystem/smartdc:default online Nov_06 svc:/system/filesystem/minimal:default online Nov_06 svc:/system/rmtmpfiles:default online Nov_06 svc:/network/ipsec/policy:default online Nov_06 svc:/system/resource-mgmt:default online Nov_06 svc:/system/hostid:default online Nov_06 svc:/system/power:default online Nov_06 svc:/system/sysevent:default online Nov_06 svc:/system/logadm-upgrade:default online Nov_06 svc:/network/npiv_config:default online Nov_06 svc:/system/rbac:default online Nov_06 svc:/system/smartdc/config:default online Nov_06 svc:/system/manifest-import:default online Nov_06 svc:/system/coreadm:default online Nov_06 svc:/network/physical:default online Nov_06 svc:/system/identity:domain online Nov_06 svc:/network/iptun:default online Nov_06 svc:/network/lldp/server:default online Nov_06 svc:/system/identity:node online Nov_06 svc:/system/picl:default online Nov_06 svc:/milestone/single-user:default online Nov_06 svc:/network/initial:default online Nov_06 svc:/network/netmask:default online Nov_06 svc:/system/filesystem/local:default online Nov_06 svc:/network/service:default online Nov_06 svc:/system/smartdc/metadata:default online Nov_06 svc:/system/sysidtool:net online Nov_06 svc:/network/shares/group:zfs online Nov_06 svc:/system/dumpadm:default online Nov_06 svc:/system/boot-archive-update:default online Nov_06 svc:/system/cron:default online Nov_06 svc:/network/shares/group:default online Nov_06 svc:/network/iscsi/initiator:default online Nov_06 svc:/network/routing-setup:default online Nov_06 svc:/network/rpc/bind:default online Nov_06 svc:/system/name-service-cache:default online Nov_06 svc:/system/sysidtool:system online Nov_06 svc:/milestone/sysconfig:default online Nov_06 svc:/network/inetd:default online Nov_06 svc:/system/system-log:default online Nov_06 svc:/system/utmp:default online Nov_06 svc:/network/sendmail-client:default online Nov_06 svc:/network/ntp:default online Nov_06 svc:/network/dns/multicast:default online Nov_06 svc:/network/ipfilter:default online Nov_06 svc:/milestone/network:default online Nov_06 svc:/system/auditd:default online Nov_06 svc:/system/console-login:default online Nov_06 svc:/system/console-login:ttya online Nov_06 svc:/system/console-login:ttyb online Nov_06 svc:/system/vtdaemon:default online Nov_06 svc:/system/console-login:vt2 online Nov_06 svc:/system/console-login:vt5 online Nov_06 svc:/system/console-login:vt4 online Nov_06 svc:/system/console-login:vt3 online Nov_06 svc:/system/console-login:vt6 online Nov_06 svc:/network/ssh:default online Nov_06 svc:/system/fmd:default online Nov_06 svc:/network/smtp:sendmail online Nov_06 svc:/milestone/multi-user:default online Nov_06 svc:/system/intrd:default online Nov_06 svc:/milestone/multi-user-server:default online Nov_06 svc:/system/boot-config:default online Nov_06 svc:/system/zones:default online Nov_06 svc:/system/smartdc/init:default online Nov_06 svc:/system/smartdc/vmadmd:default online Jan_09 svc:/smartos/setup:default On Tue, Apr 8, 2014 at 6:04 PM, Chris Ferebee <[email protected]> wrote: > What SSL services are you running in the GZ? Note that none of this > applies to SSH. > > Best, > Chris > > > Am 09.04.2014 um 00:02 schrieb Tim Boudreau <[email protected]>: > > I have one machine with the global zone exposed on the internet; the test > here - http://filippo.io/Heartbleed/ - shows it to be vulnerable. > > Is there a newer USB stick image with an openssl without this problem? > > -Tim > > *smartos-discuss* | > Archives<https://www.listbox.com/member/archive/184463/=now> > <https://www.listbox.com/member/archive/rss/184463/24804823-eebbfb1e> | > Modify <https://www.listbox.com/member/?&> Your Subscription > <http://www.listbox.com/> > > > *smartos-discuss* | > Archives<https://www.listbox.com/member/archive/184463/=now> > <https://www.listbox.com/member/archive/rss/184463/24549504-c4bff9d3> | > Modify<https://www.listbox.com/member/?&>Your Subscription > <http://www.listbox.com> > -- http://timboudreau.com ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00 Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
