Detections
Analytics

1.321 OL09-00-002420

Information

OL 9 file systems must not contain .shosts files.

GROUP ID: V-271758
RULE ID: SV-271758r1091986

The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found ".shosts" files from the system.

$ sudo rm /[path]/[to]/[file]/.shosts

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271758r1091986_rule, STIG-ID|OL09-00-002420, Vuln-ID|V-271758

Plugin: Unix

Control ID: 97a012326f54c5afe064789f412261ce0ef9ecbdd0d80eec936c31b688d7db14