UBTU-16-010350 - There must be no .shosts files on the Ubuntu operating system.

Information

The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found '.shosts' files from the Ubuntu operating system.

# rm /[path]/[to]/[file]/.shosts

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-214974r610931_rule, STIG-ID|UBTU-16-010350, STIG-Legacy|SV-90179, STIG-Legacy|V-75499, Vuln-ID|V-214974

Plugin: Unix

Control ID: 46a69811e1306d787a00336118ab7b14382539b5af597f2156fea65c22d1e7aa