Detections
Analytics

1.160 SOL-11.1-070050

Information

There must be no user .rhosts files.

GROUP ID: V-216421
RULE ID: SV-216421r959010

Even though the .rhosts files are ineffective if support is disabled in /etc/pam.conf, they may have been brought over from other systems and could contain information useful to an attacker for those other systems.

Solution

The root role is required.

Remove any .rhosts files found.

# rm [file name]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-216421r959010_rule, STIG-ID|SOL-11.1-070050, Vuln-ID|V-216421

Plugin: Unix

Control ID: dfc2f98eba83cdacf830271efb1c9fdeaad4a784b152cf715782926162a0b1bf