STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The AIX system must have no .netrc files on the system.

DISA Rule

SV-215403r508663_rule

Vulnerability Number

V-215403

Group Title

SRG-OS-000073-GPOS-00041

Rule Version

AIX7-00-003101

Severity

CAT I

CCI(s)

• CCI-000196 - The information system, for password-based authentication, stores only cryptographically-protected passwords.

Weight

10

Fix Recommendation

Remove all ".netrc" file(s):
# find / -name .netrc -exec rm {} \;

Check Contents

Check the system for the existence of any ".netrc" files by running the following command:
# find / -name .netrc

If any ".netrc" file exists, this is a finding.

Vulnerability Number

V-215403

Documentable

False

Rule Version

AIX7-00-003101

Severity Override Guidance

Check the system for the existence of any ".netrc" files by running the following command:
# find / -name .netrc

If any ".netrc" file exists, this is a finding.

Check Content Reference

M

Target Key

4012

Comments