Detections
Analytics

7.1.15 Ensure there are no "shosts.equiv" files on the operating system

Information

There must be no shosts.equiv files on the operating system.

The "shosts.equiv" files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found "shosts.equiv" files from the system.

# rm /etc/ssh/shosts.equiv

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CSCv7|4.4, Rule-ID|SV-230283r627750_rule, Vuln-ID|V-230283

Plugin: Unix

Control ID: 3a4c9af6822ec12955d08a68ccdccb02c44cd09ae86a058a8fb596f22132e418