There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-11988 | GEN002040 | SV-40332r1_rule | ECCD-1 ECCD-2 | High |
| Description |
|---|
| The .rhosts, .shosts, hosts.equiv, and shosts.equiv files are used to configure host-based authentication for individual users or the system. Host-based authentication is not sufficient for preventing unauthorized access to the system. |
| STIG | Date |
|---|---|
| Solaris 10 X86 Security Technical Implementation Guide | 2014-06-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-11249r2_fix) |
|---|
| Remove the .rhosts, .shosts, hosts.equiv, and/or shosts.equiv files. |