AIX7-00-003040 - The AIX rsh daemon must be disabled.

Information

The rsh daemon permits username and passwords to be passed over the network in clear text.

Solution

Edit the "/etc/inetd.conf" file and comment out the "rshd" service.

Restart the inetd service:
# refresh -s inetd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r2

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000197, Rule-ID|SV-215346r987796_rule, STIG-ID|AIX7-00-003040, STIG-Legacy|SV-101397, STIG-Legacy|V-91299, Vuln-ID|V-215346

Plugin: Unix

Control ID: 2d22998cd3ca98f07f244560a732d11f2bdfec894bbf62dcc87e46aa1d9af159