highservicesverified ✓rollback-safe
Ensure rsh-server package is not installed
package-rsh-server-removed · UBUNTU ≥ 22, RHEL ≥ 8 · 2 impls
Description
The rsh-server package provides insecure rsh, rlogin, and rexec services that transmit credentials in cleartext.
Rationale
rsh-server allows unencrypted remote access. Must be removed per STIG requirements.
Check → Remediate
Checkpackage_state
- name:
- rsh-server
- state:
- absent
Remediatepackage_absent
- name:
- rsh-server
Framework references
STIG
V-270648 / UBTU-24-100040V-260482 / UBTU-22-215030
NIST 800-53
CM-7IA-5
Live verification
rhel8:checkubuntu22:checkubuntu24:checkubuntu26:check
#package#rsh#security#remote-access