Detections
Analytics
OL09-00-002420 - OL 9 file systems must not contain .shosts files.
Information
The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.Solution
Remove any found ".shosts" files from the system.$ sudo rm /[path]/[to]/[file]/.shosts
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-271758r1091986_rule, STIG-ID|OL09-00-002420, Vuln-ID|V-271758
Plugin: Unix
Control ID: 2916c477666bd007470ee12a3755ea83ce92578cf0f50a2f0271c823069ac9a8