OL6-00-000021 - The Oracle Linux operating system must not contain .shosts or shosts.equiv files.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The .shosts and shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found '.shosts' or 'shosts.equiv' files from the system.

# rm /[path]/[to]/[file]/.shosts
# rm /[path]/[to]/[file]/shosts.equiv

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CAT|I, CCI|CCI-000366, CSCv6|9.1, Rule-ID|SV-219957r603263_rule, STIG-ID|OL6-00-000021, STIG-Legacy|SV-109111, STIG-Legacy|V-100007, Vuln-ID|V-219957

Plugin: Unix

Control ID: 3b1ce5e51f11ce736fb51fe5b46dd764dbc0880cd6baa8b4c1bbb62356b8875a