[PATCH 1/2] changed netrc rule to only look in user home directories

David Smith dsmith at eclipse.ncsc.mil
Wed Jan 2 20:14:27 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 .../accounts/restrictions/password_storage.xml     |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
index 21de2d2..0cd615e 100644
--- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
@@ -97,7 +97,7 @@ users and should not be used.  Any <tt>.netrc</tt> files should be removed.
 <ocil clause="any .netrc files exist">
 To check the system for the existence of any <tt>.netrc</tt> files,
 run the following command:
-<pre># find / -xdev -name .netrc</pre>
+<pre># find /home -xdev -name .netrc</pre>
 <!-- needs fixup to limit search to home dirs -->
 </ocil>
 <rationale>
-- 
1.7.1



More information about the scap-security-guide mailing list