3.5.5 Removal of .rhosts and .netrc files - .rhosts

Information

This recommendation removes all instances of .rhosts and .netrc files from the system.

Rationale:

The .rhosts and .netrc files can be used to circumvent normal login or change control procedures. The existence of such files, with the relevant entries, can allow remote user access to a system bypassing local user and password authentication. Unless required these files will be removed from all user home directories.

Solution

Remove the.rhosts and .netrc files from all user home directories:

find / -name '.netrc' -exec rm {} ;
find / -name '.rhosts' -exec rm {} ;

Default Value:

N/A

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: 4870a4714f7609422970cc51da0870c8e38143a9a638969caf0f1e8a79c66a4a