Navigate

Check: GEN003830

AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE: GEN003830 (in versions v1 r14 through v1 r10)

Title

The rlogind service must not be running. (Cat II impact)

Discussion

The rlogind process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.

Check Content

Determine if the rlogind service is running. If it is, this is a finding. # grep -v "^#" /etc/inetd.conf |grep rlogin If any results are returned, this is a finding

Fix Text

Disable the rlogind service out of the '/etc/inetd.conf' file. # vi /etc/inetd.conf Comment out the rlogind service. Restart the inetd service. # refresh -s inetd

Additional Identifiers

Rule ID: SV-38876r1_rule

Vulnerability ID: V-22432

Group Title: GEN003830

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000068	The information system implements cryptographic mechanisms to protect the confidentiality of remote access sessions.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-17 (2)	Protection Of Confidentiality / Integrity Using Encryption