Detections
Analytics

GEN005240 - The .Xauthority utility must only permit access to authorized hosts.

Information

If unauthorized clients are permitted access to the X server, a user's X session may be compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove unauthorized clients from the xauth configuration.
# xauth remove <display name>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-12017, Rule-ID|SV-37685r1_rule, STIG-ID|GEN005240, Vuln-ID|V-12017

Plugin: Unix

Control ID: b1a546d7c1b8be3c6184e114188545fccd6c7704004d3ed4f47dc4d3ef787e3a