[PATCH 1/2] changed netrc rule to only look in user home directories

Shawn Wells shawn at redhat.com
Wed Jan 2 23:16:37 UTC 2013


On 1/2/13 3:14 PM, David Smith wrote:
> Signed-off-by: David Smith<dsmith at eclipse.ncsc.mil>
> ---
>   .../accounts/restrictions/password_storage.xml     |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> index 21de2d2..0cd615e 100644
> --- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
> +++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> @@ -97,7 +97,7 @@ users and should not be used.  Any <tt>.netrc</tt> files should be removed.
>   <ocil clause="any .netrc files exist">
>   To check the system for the existence of any <tt>.netrc</tt> files,
>   run the following command:
> -<pre># find / -xdev -name .netrc</pre>
> +<pre># find /home -xdev -name .netrc</pre>
>   <!-- needs fixup to limit search to home dirs -->
>   </ocil>
>   <rationale>
> -- 1.7.1

Ack


More information about the scap-security-guide mailing list