Detections
Analytics
SLES-15-040020 - There must be no .shosts files on the SUSE operating system.
Information
The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.Solution
Remove any ".shosts" files found on the SUSE operating system.> sudo rm /[path]/[to]/[file]/.shosts
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R6_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-234984r991589_rule, STIG-ID|SLES-15-040020, Vuln-ID|V-234984
Plugin: Unix
Control ID: 7565c5ca64ccf0d233e8a07b3bb952d8894adacee8a760119c01d26382d7291d