Title

There must be no user .rhosts files. (Cat I impact)

Discussion

Even though the .rhosts files are ineffective if support is disabled in /etc/pam.conf, they may have been brought over from other systems and could contain information useful to an attacker for those other systems.

Check Content

The root role is required. Check for the presence of .rhosts files. # for dir in \ `logins -ox | awk -F: '($8 == "PS") { print $6 }'`; do find ${dir}/.rhosts -type f -ls 2>/dev/null done If output is produced, this is a finding.

Fix Text

The root role is required. Remove any .rhosts files found. # rm [file name]

Additional Identifiers

Rule ID: SV-216421r603267_rule

Vulnerability ID: V-216421

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.