Detections
Analytics

1.320 OL09-00-002419

Information

OL 9 file systems must not contain shosts.equiv files.

GROUP ID: V-271757
RULE ID: SV-271757r1092604

The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found "shosts.equiv" files from the system.

$ sudo rm /[path]/[to]/[file]/shosts.equiv

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271757r1092604_rule, STIG-ID|OL09-00-002419, Vuln-ID|V-271757

Plugin: Unix

Control ID: a66a954456829f07ad5f90d1a3a92fe8948f31d30f8771d2d3677b1317e72ca0