4.4.5 Remote daemon lockdown

Information

Removes all permissions from the remote service daemons: rlogind, rshd and also tftpd.

Rationale:

This effectively disables the following daemons, for all users:

/usr/sbin/rlogind

/usr/sbin/rshd

/usr/sbin/tftpd

These remote services both send and receive usernames and passwords in clear text and should not be used. Unless required these daemons will be disabled for all users.

Solution

Use the chmod command to remove all permissions on the remote services:

chmod ugo= /usr/sbin/rlogind
chmod ugo= /usr/sbin/rshd
chmod ugo= /usr/sbin/tftpd

Default Value:

N/A

See Also

https://workbench.cisecurity.org/benchmarks/7851