mediumfilesystemunverified

Ensure no .netrc files exist

no-netrc-files · RHEL ≥ 8 · 1 impl

Description

The .netrc file stores FTP credentials in plaintext. These files should not exist in user home directories as they pose a significant security risk.

Rationale

Netrc files contain plaintext passwords for FTP servers. Attackers who gain read access to a user's home directory can harvest these credentials for further access.

Check → Remediate

Checkcommand

find /home -name '.netrc' -type f 2>/dev/null | head -1

expected_exit:: 0

Remediatemanual

note:: Review and remove .netrc files from user home directories. Use 'find /home -name .netrc -type f' to locate files. Work with users to migrate to more secure authentication methods such as SSH keys or password managers.

Framework references

NIST 800-53

IA-5AC-6

#ftp#credentials#user-files#security