UCF STIG Viewer Logo

The rexec daemon must not be running.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4688 GEN003840 SV-27437r1_rule ECSC-1 EBRP-1 High
Description
The rexecd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28623r1_chk )
# grep -v "^#" /etc/inetd.conf |grep rexec
If any results are returned, this is a finding.
Fix Text (F-24709r1_fix)
Edit /etc/inetd.conf and comment out the line for the rexec service.