The rsh daemon must not be running.
DISA Rule
SV-220039r603265_rule
Vulnerability Number
V-220039
Group Title
SRG-OS-000505
Rule Version
GEN003820
Severity
CAT I
CCI(s)
- CCI-000068 - The information system implements cryptographic mechanisms to protect the confidentiality of remote access sessions.
Weight
10
Fix Recommendation
Disable the remote shell service and restart inetd.
Procedure:
# svcadm disable network/shell
# svcadm refresh inetd
Check Contents
# svcs network/shell
If the service is enabled, this is a finding.
Vulnerability Number
V-220039
Documentable
False
Rule Version
GEN003820
Severity Override Guidance
# svcs network/shell
If the service is enabled, this is a finding.
Check Content Reference
M
Target Key
4060
Comments