Detections
Analytics
RHEL-08-010470 - There must be no .shosts files on the RHEL 8 operating system.
Information
The ".shosts" files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.Solution
Remove any found ".shosts" files from the system.$ sudo rm /[path]/[to]/[file]/.shosts
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_8_V2R7_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 8 STIG v2r7
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-230284r1017095_rule, STIG-ID|RHEL-08-010470, Vuln-ID|V-230284
Plugin: Unix
Control ID: 10d9a090b88f91271b89ef4482f1df09365ee177594cd5a6450abf7ba0e7b86d