UCF STIG Viewer Logo

The rexecd service must not be installed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22434 GEN003845 SV-26673r1_rule ECSC-1 Medium
Description
The rexecd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2017-03-01

Details

Check Text ( C-27699r1_chk )
Check if the rsh-server package is installed.

Procedure:
# rpm -qa | grep rsh-server

If a package is found, this is a finding.
Fix Text (F-23909r1_fix)
Remove the rsh-server package.

Procedure:
# rpm -e rsh-server