← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-4687

CAT I (High)

The rsh daemon must not be running.

Rule ID

SV-45787r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000068

Discussion

The rshd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.

Check Content

Check to see if rshd is configured to run on startup.

Procedure:
# grep disable /etc/xinetd.d/rsh

If /etc/xinetd.d/rsh exists and rsh is found to be enabled, this is a finding.

Fix Text

Edit /etc/xinetd.d/rsh and set "disable=yes".