STIGQter: STIG Summary: Solaris 11 X86 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

User .netrc files must not exist.

DISA Rule

SV-216195r603268_rule

Vulnerability Number

V-216195

Group Title

SRG-OS-000480

Rule Version

SOL-11.1-070160

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The root role is required.

Determine if any .netrc files exist, and work with the owners to determine the best course of action in accordance with site policy.

Check Contents

The root role is required.

Check for the presence of user .netrc files.

# for dir in \
`logins -ox | awk -F: '($8 == "PS") { print $6 }'`; do
ls -l ${dir}/.netrc 2>/dev/null
done

If output is produced, this is a finding.

Vulnerability Number

V-216195

Documentable

False

Rule Version

SOL-11.1-070160

Severity Override Guidance

The root role is required.

Check for the presence of user .netrc files.

# for dir in \
`logins -ox | awk -F: '($8 == "PS") { print $6 }'`; do
ls -l ${dir}/.netrc 2>/dev/null
done

If output is produced, this is a finding.

Check Content Reference

M

Target Key

4021

Comments