The rsh-server package must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-89609 | VRAU-SL-000465 | SV-100259r1_rule | Medium |
| Description |
|---|
| The "rsh-server" package provides several obsolete and insecure network services. Removing it decreases the risk of accidental (or intentional) activation of those services. |
| STIG | Date |
|---|---|
| VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2018-10-12 |
Details
| Check Text ( C-89301r1_chk ) |
|---|
| Check if "rsh-server" is installed: # rpm -q rsh-server If an "rsh-server" package is listed, this is a finding. |
| Fix Text (F-96351r1_fix) |
|---|
| To remove the "telnet-server" package, use the following command: rpm -e rsh-server |