Detections
Analytics

1.171 SOL-11.1-070160

Information

User .netrc files must not exist.

GROUP ID: V-216432
RULE ID: SV-216432r959010

The .netrc file presents a significant security risk since it stores passwords in unencrypted form.

Solution

The root role is required.

Determine if any .netrc files exist, and work with the owners to determine the best course of action in accordance with site policy.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216432r959010_rule, STIG-ID|SOL-11.1-070160, Vuln-ID|V-216432

Plugin: Unix

Control ID: 616b8bee5633906a80f5d8b218149fb512ec89a45462fbf677cd3a621ba09833