The .rhosts file must not be supported in PAM.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-11989	GEN002100	SV-38264r2_rule		Medium

Description
.rhosts files are used to specify a list of hosts permitted remote access to a particular account without authenticating. The use of such a mechanism defeats strong identification and authentication requirements.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2017-12-08

Details

Check Text ( C-36422r3_chk )
Verify the remsh and rexec services have not been configured to use the PAM module: # cat /etc/pam.conf \| tr '\011' ' ' \| tr -s ' ' \| sed -e 's/^[ \t]*//' \| grep -v "^#" \| grep "^rcomds" \| egrep "auth\|account" \| egrep "libpam_unix\|libpam_hpsec" If any of the following lines are returned, this is a finding. rcomds auth required libpam_hpsec.so.1 rcomds auth required libpam_unix.so.1 rcomds account required libpam_hpsec.so.1 rcomds account required libpam_unix.so.1

Check Text ( C-36422r3_chk )

Verify the remsh and rexec services have not been configured to use the PAM module:
# cat /etc/pam.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v "^#" | grep "^rcomds" | egrep "auth|account" | egrep "libpam_unix|libpam_hpsec"

If any of the following lines are returned, this is a finding.

rcomds auth required libpam_hpsec.so.1
rcomds auth required libpam_unix.so.1
rcomds account required libpam_hpsec.so.1
rcomds account required libpam_unix.so.1

Fix Text (F-31761r1_fix)
Edit /etc/pam.conf and comment/remove the "rcomds" line(s).