Vulnerability Discussion

The "rsh" package provides a client for several obsolete and insecure network services. Removing it decreases the risk of accidental (or intentional) use of those services.

Check

Verify that the rsh package is not installed with the following command:

$ dnf list --installed rsh

Error: No matching Packages to list

If the "rsh" package is installed, this is a finding.

Fix

Remove the rsh package with the following command:

$ dnf remove rsh