STIGQter: STIG Summary: Solaris 11 SPARC Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

User .netrc files must not exist.

DISA Rule

SV-216432r603267_rule

Vulnerability Number

V-216432

Group Title

SRG-OS-000480

Rule Version

SOL-11.1-070160

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The root role is required.

Determine if any .netrc files exist, and work with the owners to determine the best course of action in accordance with site policy.

Check Contents

The root role is required.

Check for the presence of user .netrc files.

# for dir in \
`logins -ox | awk -F: '($8 == "PS") { print $6 }'`; do
ls -l ${dir}/.netrc 2>/dev/null
done

If output is produced, this is a finding.

Vulnerability Number

V-216432

Documentable

False

Rule Version

SOL-11.1-070160

Severity Override Guidance

The root role is required.

Check for the presence of user .netrc files.

# for dir in \
`logins -ox | awk -F: '($8 == "PS") { print $6 }'`; do
ls -l ${dir}/.netrc 2>/dev/null
done

If output is produced, this is a finding.

Check Content Reference

M

Target Key

4022

Comments