Detections
Analytics

7.1.14 Ensure there are no ".shosts" files on the operating system

Information

There must be no .shosts files on the operating system.

The ".shosts" files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found ".shosts" files from the system.

# rm /[path]/[to]/[file]/.shosts

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CSCv7|4.4, Rule-ID|SV-230284r627750_rule, Vuln-ID|V-230284

Plugin: Unix

Control ID: ad4d1e0a151590d8ea7a34533643cc9aef71ce04d99c8b198563ed1e5ea5170c