Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the AIX system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-91739 | AIX7-00-003138 | SV-101837r1_rule | Medium |
| Description |
|---|
| Trust files are convenient, but when used in conjunction with the remote login services, they can allow unauthenticated access to a system. |
| STIG | Date |
|---|---|
| IBM AIX 7.x Security Technical Implementation Guide | 2020-02-24 |
Details
| Check Text ( C-90893r1_chk ) |
|---|
| Check for the existence of the files using: # find / -name .rhosts # find / -name .shosts # find / -name hosts.equiv # find / -name shosts.equiv If ".rhosts", ".shosts", "hosts.equiv", or "shosts.equiv" are found, this is a finding. |
| Fix Text (F-97937r1_fix) |
|---|
| Remove the ".rhosts", ".shosts", "hosts.equiv", and/or "shosts.equiv" files. |