Details

This entry starts the rwalld daemon when required. This service allows remote users to broadcast system wide messages.

The rwalld service allows remote users to broadcast system wide messages. The service runs as root and should be disabled unless absolutely necessary.

Solution

In /etc/inetd.conf, comment out the rwalld entry-

chsubserver -r inetd -C /etc/inetd.conf -d -v ‘rwalld’ -p ‘udp’

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/528

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits