Detections
Analytics

1.169 SOL-11.1-070160

Information

User .netrc files must not exist.

GROUP ID: V-216195RULE ID: SV-216195r959010

The .netrc file presents a significant security risk since it stores passwords in unencrypted form.

Solution

The root role is required.

Determine if any .netrc files exist, and work with the owners to determine the best course of action in accordance with site policy.

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216195r959010_rule, STIG-ID|SOL-11.1-070160, Vuln-ID|V-216195

Plugin: Unix

Control ID: 89d9cfc7f0b17eb716d242e3be8001e2a221620f9d85e4cb2c443527beeb4d15