GEN003820 - The rsh daemon must not be running.

Information

The rshd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.

Solution

Edit /etc/xinetd.d/rsh and set 'disable=yes'.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL

References: 800-53|AC-17(2), CAT|I, CCE|CCE-4141-8, CCI|CCI-000068, Group-ID|V-4687, Rule-ID|SV-37441r1_rule, STIG-ID|GEN003820, Vuln-ID|V-4687

Plugin: Unix

Control ID: a036fd3c69871eacd0428e29603f7208fb5cab70b7f2b84154253b89a5e2e557