Title

There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the AIX system. (Cat II impact)

Discussion

Trust files are convenient, but when used in conjunction with the remote login services, they can allow unauthenticated access to a system.

Check Content

Check for the existence of the files using: # find / -name .rhosts # find / -name .shosts # find / -name hosts.equiv # find / -name shosts.equiv If ".rhosts", ".shosts", "hosts.equiv", or "shosts.equiv" are found, this is a finding.

Fix Text

Remove the ".rhosts", ".shosts", "hosts.equiv", and/or "shosts.equiv" files.

Additional Identifiers

Rule ID: SV-215432r877377_rule

Vulnerability ID: V-215432

Group Title: SRG-OS-000480-GPOS-00229

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.