The rwalld daemon must be disabled on AIX.

The rwalld service allows remote users to broadcast system wide messages. The service runs as root and should be disabled unless absolutely necessary to prevent attacks.

From the command prompt, execute the following command: # grep "^rwalld[[:blank:]]" /etc/inetd.conf

If there is any output from the command, this is a finding.

In "/etc/inetd.conf", comment out the "rwalld" entry by running command: # chsubserver -r inetd -C /etc/inetd.conf -d -v 'rwalld' -p 'udp'

Restart inetd: # refresh -s inetd