Detections
Analytics

1.83 OL08-00-010460

Information

There must be no "shosts.equiv" files on the OL 8 operating system.

GROUP ID: V-248597RULE ID: SV-248597r991589

The "shosts.equiv" files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found "shosts.equiv" files from the system.

$ sudo rm /etc/ssh/shosts.equiv

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-248597r991589_rule, STIG-ID|OL08-00-010460, Vuln-ID|V-248597

Plugin: Unix

Control ID: fc7b9a1beb00f96601bd053f0c515b4e75f4d894763bc803aaa54ab2b193d862