[PATCH 1/2] changed netrc rule to only look in user home directories
Shawn Wells
shawn at redhat.com
Wed Jan 2 23:16:37 UTC 2013
On 1/2/13 3:14 PM, David Smith wrote:
> Signed-off-by: David Smith<dsmith at eclipse.ncsc.mil>
> ---
> .../accounts/restrictions/password_storage.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> index 21de2d2..0cd615e 100644
> --- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
> +++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> @@ -97,7 +97,7 @@ users and should not be used. Any <tt>.netrc</tt> files should be removed.
> <ocil clause="any .netrc files exist">
> To check the system for the existence of any <tt>.netrc</tt> files,
> run the following command:
> -<pre># find / -xdev -name .netrc</pre>
> +<pre># find /home -xdev -name .netrc</pre>
> <!-- needs fixup to limit search to home dirs -->
> </ocil>
> <rationale>
> -- 1.7.1
Ack
More information about the scap-security-guide
mailing list