Detections
Analytics
OL6-00-000021 - The Oracle Linux operating system must not contain .shosts or shosts.equiv files.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
The .shosts and shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.Solution
Remove any found '.shosts' or 'shosts.equiv' files from the system.# rm /[path]/[to]/[file]/.shosts
# rm /[path]/[to]/[file]/shosts.equiv
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V2R6_STIG.zip
Item Details
Audit Name: DISA STIG Oracle Linux 6 v2r6
References: CAT|I, CCI|CCI-000366, Rule-ID|SV-219957r793847_rule, STIG-ID|OL6-00-000021, STIG-Legacy|SV-109111, STIG-Legacy|V-100007, Vuln-ID|V-219957
Plugin: Unix
Control ID: 95cf2eff3dd33659992e06ca7915fcc72772365e727bf94575383311f8794d53