>From b9e47bf286c0539ec27ab7855e511af2c1db2eb3 Mon Sep 17 00:00:00 2001 From: Michael McConachie Date: Thu, 20 Sep 2012 16:53:57 -0700 Subject: [PATCH] Check text for 'Remove Rsh Trust Files' entry for SSST Signed-off-by: Michael McConachie --- RHEL6/input/services/obsolete.xml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/RHEL6/input/services/obsolete.xml b/RHEL6/input/services/obsolete.xml index 874d27e..f5e086a 100644 --- a/RHEL6/input/services/obsolete.xml +++ b/RHEL6/input/services/obsolete.xml @@ -177,6 +177,11 @@ stolen by eavesdroppers on the network. The files /etc/hosts.equiv and ~/.rhosts (in each user's home directory) list remote hosts and users that are trusted by the local system when using the rshd daemon. +cd to the directories in question, and delete them one at a time, or +perform the following commands to delete them from any location: +
 # rm /etc/hosts.equiv
+
 $ rm ~/.rhosts
+The output will These files are not needed and should be removed if they exist. When used in conjunction with the R-services, they can allow unauthenticated access to a system. -- 1.7.11.4