← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215347

CAT I (High)

The AIX rlogind service must be disabled.

Rule ID

SV-215347r987796_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000197

Discussion

The rlogin daemon permits username and passwords to be passed over the network in clear text.

Check Content

Determine if the "rlogind" service is running by running the following command:
# grep -v "^#" /etc/inetd.conf |grep rlogin 

If the above grep command returned a line that contains "rlogin", this is a finding.

Fix Text

Disable the rlogind service by editing the "'etc/inetd.conf" file. 

# vi /etc/inetd.conf 

Comment out the "rlogind" service. 

Restart the inetd service: 
# refresh -s inetd