Check: GEN002000
SUSE Linux Enterprise Server v11 for System z STIG:
GEN002000
(in versions v1 r12 through v1 r9)
Title
There must be no .netrc files on the system. (Cat II impact)
Discussion
Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.
Check Content
Check the system for the existence of any .netrc files. Procedure: # find / -name .netrc If any .netrc file exists, this is a finding.
Fix Text
Remove the .netrc file(s). Procedure: # find / -name .netrc # rm <.netrc file>
Additional Identifiers
Rule ID: SV-45165r1_rule
Vulnerability ID: V-913
Group Title: GEN002000
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000196 |
The information system, for password-based authentication, stores only cryptographically-protected passwords. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| IA-5 (1) |
Password-Based Authentication |