← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215403

CAT I (High)

The AIX system must have no .netrc files on the system.

Rule ID

SV-215403r1009555_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-004062 CCI-000196

Discussion

Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.

Check Content

Check the system for the existence of any ".netrc" files by running the following command: 
# find / -name .netrc 

If any ".netrc" file exists, this is a finding.

Fix Text

Remove all ".netrc" file(s):
#  find / -name .netrc -exec  rm {} \;