Detections
Analytics

7.3 Remove .rhosts support in /etc/pam.conf

Information

Used in conjunction with the BSD-style .r-commands. (rlogin, rsh, rcp), .rhosts files implement a weak form of authentication based on the network address or host name of the remote computer (that can be spoofed by a potential attacker to exploit the local system). Disabling .rhosts support helps prevent users from subverting the system's normal access control mechanisms.

See Also

https://workbench.cisecurity.org/files/633

Item Details

Audit Name: CIS Solaris 9 v1.3

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: b0065263bc5df60ab56021f7a8b3751328aae4d6200fdca272c0b43cdc969892