UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

There must be no .rhosts or hosts.equiv files on the system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-38491 RHEL-06-000019 SV-50292r1_rule High
Description
Trust files are convenient, but when used in conjunction with the R-services, they can allow unauthenticated access to a system.
STIG Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2017-04-28

Details

Check Text ( None )
None
Fix Text (F-43438r1_fix)
The files "/etc/hosts.equiv" and "~/.rhosts" (in each user's home directory) list remote hosts and users that are trusted by the local system when using the rshd daemon. To remove these files, run the following command to delete them from any location.

# rm /etc/hosts.equiv



$ rm ~/.rhosts