There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the AIX system.

Trust files are convenient, but when used in conjunction with the remote login services, they can allow unauthenticated access to a system.

Check for the existence of the files using: # find / -name .rhosts # find / -name .shosts # find / -name hosts.equiv # find / -name shosts.equiv

If ".rhosts", ".shosts", "hosts.equiv", or "shosts.equiv" are found, this is a finding.

Remove the ".rhosts", ".shosts", "hosts.equiv", and/or "shosts.equiv" files.