V-215433

Discussion

.rhosts files are used to specify a list of hosts permitted remote access to a particular account without authenticating. The use of such a mechanism defeats strong identification and authentication requirements.

Check Content

Check the PAM configuration for "rhosts_auth" using command: 
# grep rhosts_auth /etc/pam.conf |grep -v \# 

If a "rhosts_auth" entry is found, this is a finding.