UCF STIG Viewer Logo

User .netrc files must not exist.


Overview

Finding ID Version Rule ID IA Controls Severity
V-48067 SOL-11.1-070160 SV-60939r2_rule Medium
Description
The .netrc file presents a significant security risk since it stores passwords in unencrypted form.
STIG Date
Solaris 11 SPARC Security Technical Implementation Guide 2017-01-27

Details

Check Text ( None )
None
Fix Text (F-51675r1_fix)
The root role is required.

Determine if any .netrc files exist, and work with the owners to determine the best course of action in accordance with site policy.