← Rules Catalog
criticalsystemverified

Ensure no shosts.equiv files exist

shosts-equiv-absent · RHEL ≥ 8 · 1 impl

Description

The /etc/hosts.equiv and /etc/shosts.equiv files provide trusted host access without requiring passwords. These files must not exist on the system.

Rationale

The shosts.equiv and hosts.equiv files grant access to remote hosts without passwords. An attacker who compromises a listed host gains access without authenticating. These files must be removed.

Check → Remediate

Checkcommand
find / -name shosts.equiv -o -name hosts.equiv 2>/dev/null | head -1
Remediatecommand_exec
find / -name shosts.equiv -o -name hosts.equiv 2>/dev/null -exec rm -f {} +

Framework references

STIG

V-281271 / RHEL-10-700680V-257955 / RHEL-09-252070V-230283

NIST 800-53

AC-17IA-2

Live verification

rhel8:check
#authentication#rsh#trust#attack-surface