1.158 SOL-11.1-070050

Information

There must be no user .rhosts files.

GROUP ID: V-216184RULE ID: SV-216184r959010

Even though the .rhosts files are ineffective if support is disabled in /etc/pam.conf, they may have been brought over from other systems and could contain information useful to an attacker for those other systems.

Solution

The root role is required.

Remove any .rhosts files found.

rm [file name]

See Also

https://workbench.cisecurity.org/benchmarks/23873