Check: RHEL-06-000213
Red Hat Enterprise Linux 6 STIG:
RHEL-06-000213
(in versions v2 r2 through v1 r14)
Title
The rsh-server package must not be installed. (Cat I impact)
Discussion
The "rsh-server" package provides several obsolete and insecure network services. Removing it decreases the risk of those services' accidental (or intentional) activation.
Check Content
Run the following command to determine if the "rsh-server" package is installed: # rpm -q rsh-server If the package is installed, this is a finding.
Fix Text
The "rsh-server" package can be uninstalled with the following command: # yum erase rsh-server
Additional Identifiers
Rule ID: SV-217985r603264_rule
Vulnerability ID: V-217985
Group Title: SRG-OS-000095
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |