Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
There must be no .netrc files on the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-913 | GEN002000 | SV-37436r1_rule | IAIA-1 IAIA-2 | Medium |
| Description |
|---|
| Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2016-06-01 |
Details
| Check Text ( C-36051r1_chk ) |
|---|
| Check the system for the existence of any .netrc files. Procedure: # find / -name .netrc If any .netrc file exists, this is a finding. |
| Fix Text (F-31295r1_fix) |
|---|
| Remove the .netrc file(s). Procedure: # find / -name .netrc # rm <.netrc file> |