The AIX rlogind service must be disabled.

The rlogin daemon permits username and passwords to be passed over the network in clear text.

Determine if the "rlogind" service is running by running the following command: # grep -v "^#" /etc/inetd.conf |grep rlogin

If the above grep command returned a line that contains "rlogin", this is a finding.

Disable the rlogind service by editing the "'etc/inetd.conf" file.

# vi /etc/inetd.conf 

Comment out the "rlogind" service.

Restart the inetd service: # refresh -s inetd