← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-913

CAT II (Medium)

There must be no .netrc files on the system.

Rule ID

SV-45165r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000196

Discussion

Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.

Check Content

Check the system for the existence of any .netrc files.

Procedure:
# find / -name .netrc

If any .netrc file exists, this is a finding.

Fix Text

Remove the .netrc file(s).

Procedure:
# find / -name .netrc
# rm <.netrc file>