Detections
Analytics

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - 'shosts.equiv'

Information

The .rhosts, .shosts, hosts.equiv, and shosts.equiv files are used to configure host-based authentication for individual users or the system. Host-based authentication is not sufficient for preventing unauthorized access to the system.

Solution

Remove all the r-commands access control files.

Procedure:
# find / -name .rhosts -exec rm {} ;
# find / -name .shosts -exec rm {} ;
# find / -name hosts.equiv -exec rm {} ;
# find / -name shosts.equiv -exec rm {} ;

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Group-ID|V-11988, Rule-ID|SV-37370r1_rule, STIG-ID|GEN002040, Vuln-ID|V-11988

Plugin: Unix

Control ID: b1bd4dcecf9e47e7c8ae6388afc74ce5f6533b977927d04b9876ef60513294e5