HP-UX 11.23 Security Technical Implementation Guide

The HP-UX 11.23 Security Technical Implementation Guide (V1 R8) has 534 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

534STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R8

CurrentPublished Fri Jan 22 2016

There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system.

HP-UX 11.23 Security Technical Implementation Guide

Assessment Title

Rule Text

There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system.

Description

Discussion Text

The .rhosts, .shosts, hosts.equiv, and shosts.equiv files are used to configure host-based authentication for individual users or the system. Host-based authentication is not sufficient for preventing unauthorized access to the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-11988

Rule

SV-38249r1_rule

Severity

high

Rule Version

GEN002040

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check for the existence of the files.

# find / -type f -name .rhosts
# find / -type f -name .shosts
# find / -type f -name hosts.equiv
# find / -type f -name shosts.equiv

If .rhosts, .shosts, hosts.equiv, or shosts.equiv are found, this is a finding.

Implementation Procedure

Fix Text

Remove the .rhosts, .shosts, hosts.equiv, and/or shosts.equiv files.

STIG check 38 of 534 in the HP-UX 11.23 STIG checklist

← Previous · V-11987The .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files must not contain a plus (+) without defining entries for NIS+ netgroups.Next · V-11989 →The .rhosts file must not be supported in PAM.