[PATCH 1/2] Check text for 'Remove Rsh Trust Files' entry for SSST

Michael McConachie michael at redhat.com
Thu Sep 20 23:53:57 UTC 2012


---
 RHEL6/input/services/obsolete.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/RHEL6/input/services/obsolete.xml b/RHEL6/input/services/obsolete.xml
index 874d27e..f5e086a 100644
--- a/RHEL6/input/services/obsolete.xml
+++ b/RHEL6/input/services/obsolete.xml
@@ -177,6 +177,11 @@ stolen by eavesdroppers on the network.
 <description>The files <tt>/etc/hosts.equiv</tt> and <tt>~/.rhosts</tt> (in
 each user's home directory) list remote hosts and users that are trusted by the
 local system when using the rshd daemon.</description>
+<ocil>cd to the directories in question, and delete them one at a time, or
+perform the following commands to delete them from any location:
+<pre> # rm /etc/hosts.equiv</pre>
+<pre> $ rm ~/.rhosts</pre></ocil>
+The output will 
 <rationale>These files are not needed and should be removed if they exist.
 When used in conjunction with the R-services, they can allow
 unauthenticated access to a system.</rationale>
-- 
1.7.11.4


--4Ckj6UjgE2iN1+kY--


More information about the scap-security-guide mailing list