criticalsystemverified ✓
Ensure no shosts.equiv files exist
shosts-equiv-absent · RHEL ≥ 8 · 1 impl
Description
The /etc/hosts.equiv and /etc/shosts.equiv files provide trusted host access without requiring passwords. These files must not exist on the system.
Rationale
The shosts.equiv and hosts.equiv files grant access to remote hosts without passwords. An attacker who compromises a listed host gains access without authenticating. These files must be removed.
Check → Remediate
Checkcommand
find / -name shosts.equiv -o -name hosts.equiv 2>/dev/null | head -1
Remediatecommand_exec
find / -name shosts.equiv -o -name hosts.equiv 2>/dev/null -exec rm -f {} +Framework references
STIG
V-281271 / RHEL-10-700680V-257955 / RHEL-09-252070V-230283
NIST 800-53
AC-17IA-2
Live verification
rhel8:check
#authentication#rsh#trust#attack-surface