This is not the latest version of the STIG. This is provided for archival purposes. See the latest STIG.

There must be no .shosts files on AlmaLinux OS 9.

STIG ID: ALMA-09-020040  |  SRG: SRG-OS-000480-GPOS-00227 |  Severity: medium (CAT II)  |  CCI: CCI-000366 |  Vulnerability Id: V-269257

Vulnerability Discussion

The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.

Check

Verify there are no ".shosts" files on AlmaLinux OS 9 with the following command:

$ find / -name .shosts

If a ".shosts" file is found, this is a finding.

Fix

Remove any found ".shosts" files from the system.

$ rm /[path]/[to]/[file]/.shosts
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.