Detections
Analytics
AIX7-00-003101 - The AIX system must have no .netrc files on the system.
Information
Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.Solution
Remove all ".netrc" file(s):# find / -name .netrc -exec rm {} \;
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000196, CCI|CCI-004062, Rule-ID|SV-215403r1009555_rule, STIG-ID|AIX7-00-003101, STIG-Legacy|SV-101387, STIG-Legacy|V-91289, Vuln-ID|V-215403
Plugin: Unix
Control ID: f229c847c8742eb4859a14d8877d6f423bd1665c63b125f3bfac27d843d8667c