[PATCH 1/2] changed netrc rule to only look in user home directories
David Smith
dsmith at eclipse.ncsc.mil
Wed Jan 2 20:14:27 UTC 2013
Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
.../accounts/restrictions/password_storage.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
index 21de2d2..0cd615e 100644
--- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
@@ -97,7 +97,7 @@ users and should not be used. Any <tt>.netrc</tt> files should be removed.
<ocil clause="any .netrc files exist">
To check the system for the existence of any <tt>.netrc</tt> files,
run the following command:
-<pre># find / -xdev -name .netrc</pre>
+<pre># find /home -xdev -name .netrc</pre>
<!-- needs fixup to limit search to home dirs -->
</ocil>
<rationale>
--
1.7.1
More information about the scap-security-guide
mailing list