The AIX rsh daemon must be disabled.

The rsh daemon permits username and passwords to be passed over the network in clear text.

From the command prompt, run the following command: # grep -v "^#" /etc/inetd.conf |grep rshd

The above command may show the daemon is enabled like this: shell stream tcp6 nowait root /usr/sbin/rshd rshd

If the above grep command returned a line that contains "rshd", this is a finding.

Edit the "/etc/inetd.conf" file and comment out the "rshd" service.

Restart the inetd service: # refresh -s inetd