I am working on a project that involves an IOT device (the now deprecated Intel Galileo). I am looking at hardening these devices and I noticed that the
systemd-resolved service is listening on all interfaces (
root@hostname:~# netstat -altnp Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:5355 0.0.0.0:* LISTEN 240/systemd-resolve
After reading the freedesktop.org description of the service here, it states that,
systemd-resolved is a system service that provides network name resolution to local applications.
I ran a test where I ran
google.com where the
systemd-resolved was running. I then disabled the service and sent a
yahoo.com. There was no packet loss for either request.
My question(s) are as follows:
What is this service doing?
If it is providing name resolution to local applications, why does it listen on the
Is this a security concern?
What are the potential impacts of disabling this service?
Thanks in advance for any information / help. Apologies if I have not complied with question format, first time post. Please edit as required.