Duplicate testing for telnetd instead of rsh

[aavetis]

https://github.com/dev-sec/linux-baseline/blob/master/controls/package_spec.rb#L39-L55

package-02 and package-03 seem to both be testing for telnetd, but seems like it intends to test for rsh.

control 'package-02' do
  impact 1.0
  title 'Do not install Telnet server'
  desc 'Telnet protocol uses unencrypted communication, that means the password and other sensitive data are unencrypted. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.2'
  describe package('telnetd') do
    it { should_not be_installed }
  end
end

control 'package-03' do
  impact 1.0
  title 'Do not install rsh server'
  desc 'The r-commands suffers same problem as telnet. http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf, Chapter 3.2.3'
  describe package('telnetd') do
    it { should_not be_installed }
  end
end

[chris-rock]

@aavetis Thank you for this finding. Would you like to open a PR to fix this?

[aavetis]

yep @chris-rock - just made #98; wasn't sure the package name off the top of my head :X