All .rhosts, .shosts, or host.equiv files must only contain trusted host-user pairs.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4427 | GEN002020 | SV-4427r2_rule | ECCD-2 ECCD-1 | Medium |
| Description |
|---|
| If these files are not properly configured, they could allow malicious access by unknown malicious users from untrusted hosts who could compromise the system. |
| STIG | Date |
|---|---|
| SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2015-10-01 |
Details
| Check Text ( C-8219r2_chk ) |
|---|
| Locate and examine all .rhosts, .shosts, hosts.equiv, and shosts.equiv files. Procedure: # find / -name .rhosts # more / # find / -name .shosts # more / # find / -name hosts.equiv # more / # find / -name shosts.equiv # more / If any .rhosts, .shosts, hosts.equiv, or shosts.equiv file contains other than host-user pairs, this is a finding. |
| Fix Text (F-4326r2_fix) |
|---|
| If possible, remove the .rhosts, .shosts, hosts.equiv, and shosts.equiv files. If the files are required, remove any content from the files except for necessary host-user pairs. |