Detections
Analytics
GEN005220 - .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.
Information
If access to the X server is not restricted, a user's X session may be compromised.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Create an X*.hosts file, where '*' is a display number used to limit X window connections. Add the list of authorized X clients to the file.See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-2(1)(b), CAT|II, CCI|CCI-000297, Group-ID|V-12016, Rule-ID|SV-37684r1_rule, STIG-ID|GEN005220, Vuln-ID|V-12016
Plugin: Unix
Control ID: 069b232d50aad52b74e2048ddb80278fe5ea5fac62a625c47873ac2f332c5df6