Detections
Analytics

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - '.rhosts'

Information

The .rhosts, .shosts, hosts.equiv, and shosts.equiv files are used to configure host-based authentication for individual users or the system. Host-based authentication is not sufficient for preventing unauthorized access to the system.

Solution

Remove the .rhosts, .shosts, hosts.equiv, and/or shosts.equiv files.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CAT|I, CCI|CCI-000366, CSCv6|9.1, Rule-ID|SV-12489r2_rule, STIG-ID|GEN002040, Vuln-ID|V-11988

Plugin: Unix

Control ID: 8ca8c6d2cde42bebd65717680c500ed3da8a604f82a26f15d3da2a5e7aa50051