Check: AIX7-00-003101
IBM AIX 7.x STIG:
AIX7-00-003101
(in versions v2 r9 through v1 r1)
Title
The AIX system must have no .netrc files on the system. (Cat I impact)
Discussion
Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.
Check Content
Check the system for the existence of any ".netrc" files by running the following command: # find / -name .netrc If any ".netrc" file exists, this is a finding.
Fix Text
Remove all ".netrc" file(s): # find / -name .netrc -exec rm {} \;
Additional Identifiers
Rule ID: SV-215403r877397_rule
Vulnerability ID: V-215403
Group Title: SRG-OS-000073-GPOS-00041
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000196 |
The information system, for password-based authentication, stores only cryptographically-protected passwords. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| IA-5 (1) |
Password-Based Authentication |