Detections
Analytics
SLEM-05-255095 - There must be no shosts.equiv files on SLEM 5.
Information
The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.Solution
Remove any "shosts.equiv" files found on SLEM 5.> sudo rm /<path_to_file>/shosts.equiv
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R4_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-261344r996490_rule, STIG-ID|SLEM-05-255095, Vuln-ID|V-261344
Plugin: Unix
Control ID: 5047f71c8ffd7d3c9b1885755b9b1f3378afb27ceecd4b53cc8f0330c20ac28f