RHEL-09-252070 - There must be no shosts.equiv files on RHEL 9.

Information

The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Solution

Remove any found "shosts.equiv" files from the system.

$ sudo rm /[path]/[to]/[file]/shosts.equiv

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-257955r991589_rule, STIG-ID|RHEL-09-252070, Vuln-ID|V-257955

Plugin: Unix

Control ID: 696c81325de59a01cb007f61e0362e755ee5d7feb9ae6f6ccbe05f4afb3def90