Details

Trust files are convenient, but when used in conjunction with the R-services, they can allow unauthenticated access to a system.

Solution

The files ‘/etc/hosts.equiv’ and ‘~/.rhosts’ (in each user’s home directory) list remote hosts and users that are trusted by the local system when using the rshd daemon. To remove these files, run the following command to delete them from any location.

# rm /etc/hosts.equiv

$ rm ~/.rhosts

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CAT|I
• CCI|CCI-000366
• CSCv6|9.1
• Group-ID|V-50719
• Rule-ID|SV-219547r603263_rule
• STIG-ID|OL6-00-000019
• STIG-Legacy|SV-64925
• STIG-Legacy|V-50719
• Vuln-ID|V-219547

Source

• Tenable.com/audits