UCF STIG Viewer Logo

All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4428 GEN002060 SV-39502r1_rule ECLP-1 Medium
Description
If these files are accessible by users other than root or the owner, they could be used by a malicious user to set up a system compromise.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-8220r2_chk )
# find / -type f -name .rhosts
# ls -alL //.rhosts

# find / -type f -name .shosts
# ls -alL //.shosts

# find / -type f -name hosts.equiv
# ls -lL //hosts.equiv

# find / -type f -name shosts.equiv
# ls -lL //shosts.equiv

If the .rhosts, .shosts, hosts.equiv, or shosts.equiv files have permissions greater than 700, this is a finding.
Fix Text (F-4327r2_fix)
Ensure the permission for these files is set at 700 or less and the owner is the owner of the home directory that it is in. These files, outside of home directories (other than hosts.equiv which is in /etc and owned by root), have no meaning.