Deleting .rhosts in the home directory will just disable a "rlogin w/o a password". I normally comment out the line starting with login in /etc/inetd.conf and refresh -s inetd to disable rlogin.

Regards,

Kaps