STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

There must be no .rhosts or hosts.equiv files on the system.

DISA Rule

SV-219547r603263_rule

Vulnerability Number

V-219547

Group Title

SRG-OS-000480

Rule Version

OL6-00-000019

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The files "/etc/hosts.equiv" and "~/.rhosts" (in each user's home directory) list remote hosts and users that are trusted by the local system when using the rshd daemon. To remove these files, run the following command to delete them from any location.

# rm /etc/hosts.equiv

$ rm ~/.rhosts

Check Contents

The existence of the file "/etc/hosts.equiv" or a file named ".rhosts" inside a user home directory indicates the presence of an Rsh trust relationship.
If these files exist, this is a finding.

Vulnerability Number

V-219547

Documentable

False

Rule Version

OL6-00-000019

Severity Override Guidance

The existence of the file "/etc/hosts.equiv" or a file named ".rhosts" inside a user home directory indicates the presence of an Rsh trust relationship.
If these files exist, this is a finding.

Check Content Reference

M

Target Key

2928

Comments