|A Guided Tour of EnGarde Secure Linux|
|Prev||Chapter 5. Secure Administration Using Guardian Digital WebTool||Next|
By default, EnGarde disables all services except those few required for basic administration including WebTool and SSH access. You must specifically enable other services through the Service Configuration Module shown below. This ensures that the system is not made vulnerable by running unneeded services.
Services can be easily enabled and disabled at any time using this Services Configuration Module screen. Click the red or green link to toggle between Running or Stopped for Current State, or between Enabled or Disabled for the Boot State.
Starting from a secure "default-deny" state, you have now chosen the services you need to run and restricted access to each service to only those networks and addresses requiring access. With this fundamental understanding of how to control access to services under your belt you're ready to move on to service configuration.