1.61 SOL-11.1-020500

Information

Any X Windows host must write .Xauthority files.

GROUP ID: V-216073RULE ID: SV-216073r959010

.Xauthority files ensure the user is authorized to access the specific X Windows host. If .Xauthority files are not used, it may be possible to obtain unauthorized access to the X Windows host.

Solution

Ensure the X Windows host is configured to write .Xauthority files into user home directories.

Edit the Xaccess file. Ensure the line that writes the .Xauthority file is uncommented.

See Also

https://workbench.cisecurity.org/benchmarks/23873