V-22434

CAT II (Medium)

The rexecd service must not be installed.

Rule ID

SV-45808r1_rule

STIG

Version

V1R12

CCIs

The rexecd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.

Check if the rsh-server package is installed.

Procedure:
# rpm -qa | grep rsh-server

If a package is found, this is a finding.

Remove the rsh-server package.

Procedure:
# rpm -e rsh-server  
# SuSEconfig