unnecessary services installed by default

On a fresh vagrant that has had a deploy, we have rpcbind and rpc.statd running and listening:

tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1442/rpcbind
tcp 0 0 0.0.0.0:54099 0.0.0.0:* LISTEN 1473/rpc.statd

might be nice not to have those listening...

on a non-vagrant install, I dont know what we can do if we find things that are installed and listening that shouldn't be... it is normally considered a bad security practice to have unnecessary internet facing daemons running.

One option is to just leave them there, but have the default shorewall policy be such that they aren't exposed... thoughts?

(from redmine: created on 2013-03-14, closed on 2013-07-03, relates #3076)