3.3.16 /etc/rc.tcpip - rwhod

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This entry starts the rwhod daemon at system startup. This is the remote WHO service.

The rwhod daemon is the remote WHO service, which collects and broadcasts status information to peer servers on the same network. It is recommended that this daemon is disabled, unless it is required.

Solution

In /etc/rc.tcpip, comment out the rwhod entry-

chrctcp -d rwhod

See Also

https://workbench.cisecurity.org/files/528