Step 3: Policy enforcement Example

• tcpd_modify_inetd Policy method (pseudocode):

  • foreach entry in inetd Data object
  • {
  • prepend server to server_args
  • set server="/usr/local/sbin/tcpd"
  • }

• modifies inetd.conf entries to use tcpd