Detections
Analytics

1.155 ALMA-09-020150

Information

There must be no shosts.equiv files on AlmaLinux OS 9.

GROUP ID: V-269258
RULE ID: SV-269258r1050140

The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found "shosts.equiv" files from the system.

$ rm /[path]/[to]/[file]/shosts.equiv

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269258r1050140_rule, STIG-ID|ALMA-09-020150, Vuln-ID|V-269258

Plugin: Unix

Control ID: dd9e2325bd1852bdd78111ca105cb161795a021d1adc2140df639d0f48677779