Detections
Analytics

OL08-00-010470 - There must be no ".shosts" files on the OL 8 operating system.

Information

The ".shosts" files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found ".shosts" files from the system.

$ sudo rm /[path]/[to]/[file]/.shosts

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R8_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-248598r991589_rule, STIG-ID|OL08-00-010470, Vuln-ID|V-248598

Plugin: Unix

Control ID: 7a51dcbcfa916c93e301ec5c59158db578f9a9554e7285540203ca0bed25fa5e