Detections
Analytics

1.154 ALMA-09-020040

Information

There must be no .shosts files on AlmaLinux OS 9.

GROUP ID: V-269257
RULE ID: SV-269257r1050139

The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found ".shosts" files from the system.

$ rm /[path]/[to]/[file]/.shosts

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269257r1050139_rule, STIG-ID|ALMA-09-020040, Vuln-ID|V-269257

Plugin: Unix

Control ID: f56838a2f0a81a7ac4f68b69f221c970f6a49d2acae56d952ca0b91bcf3b4fb8