Detections
Analytics

1.65 SOL-11.1-020540

Information

.Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.

GROUP ID: V-216312
RULE ID: SV-216312r959010

If access to the X server is not restricted, a user's X session may be compromised.

Solution

Create an X*.hosts file, where * is a display number that may be used to limit X window connections.

Add the list of authorized X clients to the file.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2(1), 800-53|CM-6b., CAT|II, CCI|CCI-000297, CCI|CCI-000366, Rule-ID|SV-216312r959010_rule, STIG-ID|SOL-11.1-020540, Vuln-ID|V-216312

Plugin: Unix

Control ID: b1f19e5a8fb42e26fcb3e6aec2c3a7f702e4a9e23cafba67d902aa99ab30567b