Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The .Xauthority utility must only permit access to authorized hosts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-12017 | GEN005240 | SV-38288r1_rule | ECCD-1 ECCD-2 | Medium |
| Description |
|---|
| If unauthorized clients are permitted access to the X server, the user's X session may be compromised. |
| STIG | Date |
|---|---|
| HP-UX 11.23 Security Technical Implementation Guide | 2015-06-12 |
Details
| Check Text ( C-36603r1_chk ) |
|---|
| Verify the X window system access is limited to authorized clients. # xauth # xauth> list Ask the SA if the clients listed are authorized. If any are not, this is a finding. |
| Fix Text (F-31970r1_fix) |
|---|
| Remove unauthorized clients from the xauth configuration. # xauth remove |