Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4428 | GEN002060 | SV-4428r2_rule | ECLP-1 | Medium |
| Description |
|---|
| If these files are accessible by users other than root or the owner, they could be used by a malicious user to set up a system compromise. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-8220r2_chk ) |
|---|
| # find / -type f -name .rhosts # ls -alL / # find / -type f -name .shosts # ls -alL / # find / -type f -name hosts.equiv # ls -lL / # find / -type f -name shosts.equiv # ls -lL / If the .rhosts, .shosts, hosts.equiv, or shosts.equiv files have permissions greater than 700, this is a finding. |
| Fix Text (F-4327r2_fix) |
|---|
| Ensure the permission for these files is set at 700 or less and the owner is the owner of the home directory that it is in. These files, outside of home directories (other than hosts.equiv which is in /etc and owned by root), have no meaning. |