Detections
Analytics

1.65 SOL-11.1-020540

Information

.Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.

GROUP ID: V-216077RULE ID: SV-216077r959010

If access to the X server is not restricted, a user's X session may be compromised.

Solution

Create an X*.hosts file, where * is a display number that may be used to limit X window connections.

Add the list of authorized X clients to the file.

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-2(1), 800-53|CM-6b., CAT|II, CCI|CCI-000297, CCI|CCI-000366, Rule-ID|SV-216077r959010_rule, STIG-ID|SOL-11.1-020540, Vuln-ID|V-216077

Plugin: Unix

Control ID: de08535f3f851447f564a2255987bd6de52ccb655b5ced6a563cef5bc534b7d2