Systems services that are not required must be disabled.

Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetrate the system.

Determine all of the systems services that are enabled on the system.

# svcs -a | grep online

Document all enabled services and disable any that are not required.

The Service Management profile is required:

Disable any other service not required.

# pfexec svcadm disable [service name]