>From 028d5709be25b32b082ac1eebe3662ac31c97646 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 19 Sep 2012 11:30:55 -0400 Subject: [PATCH 02/14] Created OCIL for no_netrc_files - Updated description language to place OCIL language in tags - Expanded OCIL check description to state that any .netrc files should be deleted or documented --- .../accounts/restrictions/password_storage.xml | 12 ++++++++---- 1 files changed, 8 insertions(+), 4 deletions(-) diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml index 29572f2..96b1b7a 100644 --- a/RHEL6/input/system/accounts/restrictions/password_storage.xml +++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml @@ -63,16 +63,20 @@ used to auto-login into FTP servers and reside in the user's home directory. These files may contain unencrypted passwords to remote FTP servers making them susceptible to access by unauthorized users and should not be used. -

-To check the system for the existence of any .netrc files, -run the following command: -
# find / -name .netrc
Unencrypted passwords for remote FTP servers may be stored in .netrc files. DoD policy requires passwords be encrypted in storage and not used in access scripts. +Check the system for the existence of .netrc files by +running the following command: +
# find / -name .netrc
+ +Output indicates the presense of .netrc files. Remove .netrc +files wherever possible. If .netrc files are required for +mission functionality their existence and risk mitigation steps should be +documented.
-- 1.7.1