Detections
Analytics

GEN005220 - .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

If access to the X server is not restricted, a user's X session may be compromised.
 NOTE: Nessus has not performed this query, and this check is only provided for informational purposes.

Solution

Create an X*.hosts file, where '*' is a display number used to limit X window connections. Add the list of authorized X clients to the file.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R17_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000297, Group-ID|V-12016, Rule-ID|SV-37684r1_rule, STIG-ID|GEN005220

Plugin: Unix

Control ID: 650722ba565c947cb851a9e0c390b53b421d69692181e59280d4357134abb83b