The rexecd service must not be installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22434	GEN003845	SV-35133r1_rule	ECSC-1	Medium

Description
The rexecd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2015-12-02

Details

Check Text ( C-36541r2_chk )
Determine if the rexecd service is installed. # cat /etc/inetd.conf | sed -e 's/^[ \t]*//' | tr '\011' ' ' | tr -s ' ' |grep -v "^#" | cut -f 6,7 -d " " | grep -c -i rexecd If rexecd is found to be installed, this is a finding.

Fix Text (F-31905r1_fix)
Edit /etc/inetd.conf and comment out the rexecd service: # vi /etc/inetd.conf Restart the inetd service via the following command: # inetd -c Disable the binary: chmod 000 /usr/lbin/rexecd Additionally, the binary name may also be changed: mv /usr/lbin/rexecd /usr/lbin/