UCF STIG Viewer Logo

The Red Hat Enterprise Linux operating system must not contain .shosts or shosts.equiv files.


Finding ID Version Rule ID IA Controls Severity
V-217862 RHEL-06-000021 SV-217862r505923_rule High
The .shosts and shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2020-09-03


Check Text ( C-19343r462695_chk )
Verify there are no ".shosts" or "shosts.equiv" files on the system.

# find / -name '*.shosts'

# find / -name shosts.equiv

If any ".shosts" or "shosts.equiv" files are found on the system, this is a finding.
Fix Text (F-19341r462696_fix)
Remove any found ".shosts" or "shosts.equiv" files from the system.

# rm /[path]/[to]/[file]/.shosts
# rm /[path]/[to]/[file]/shosts.equiv