Detections
Analytics

1.169 SLES-15-040030

Information

There must be no shosts.equiv files on the SUSE operating system.

GROUP ID: V-234985
RULE ID: SV-234985r991589

The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any "shosts.equiv" files found on the SUSE operating system.

sudo rm /[path]/[to]/[file]/shosts.equiv

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-234985r991589_rule, STIG-ID|SLES-15-040030, Vuln-ID|V-234985

Plugin: Unix

Control ID: 8ac4da9cfd811d0fcd4779b6537a66438f81d5df7abb04e1315dd566ab7214c8