There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-11988	GEN002040	SV-37370r1_rule	ECCD-1 ECCD-2	High

Description
The .rhosts, .shosts, hosts.equiv, and shosts.equiv files are used to configure host-based authentication for individual users or the system. Host-based authentication is not sufficient for preventing unauthorized access to the system.

STIG	Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide	2015-03-12

Details

Check Text ( C-36057r1_chk )
Check for the existence of the files. # find / -name .rhosts # find / -name .shosts # find / -name hosts.equiv # find / -name shosts.equiv If .rhosts, .shosts, hosts.equiv, or shosts.equiv are found and their use has not been documented and approved by the IAO, this is a finding.

Fix Text (F-31301r1_fix)
Remove all the r-commands access control files. Procedure: # find / -name .rhosts -exec rm {} \; # find / -name .shosts -exec rm {} \; # find / -name hosts.equiv -exec rm {} \; # find / -name shosts.equiv -exec rm {} \;