UCF STIG Viewer Logo

There must be no .netrc files on the system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-913 GEN002000 SV-45165r1_rule Medium
Description
Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.
STIG Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide 2018-09-19

Details

Check Text ( C-42509r1_chk )
Check the system for the existence of any .netrc files.

Procedure:
# find / -name .netrc

If any .netrc file exists, this is a finding.
Fix Text (F-38562r1_fix)
Remove the .netrc file(s).

Procedure:
# find / -name .netrc
# rm <.netrc file>