6.2.12 Ensure users' .netrc Files are not group or world accessible (Scored)

Open shawndwells opened this issue 5 years ago • 1 comments

Needs rule.

Or more ideally, someone could work with CIS to modernize their guidance.

Current content does not allow netrc files at all: system/accounts/accounts-restrictions/password_storage/no_netrc_files/rule.yml

Mar 29 '20 03:03 shawndwells

The requirement 6.2.13 should be removed in favor of the 6.2.15. Ticket opened in CIS community: https://workbench.cisecurity.org/benchmarks/9090/tickets/16317 Also sent a change proposal for Fedora 28 vNext: https://workbench.cisecurity.org/benchmarks/9520/tickets/16318

Sep 06 '22 15:09 marcusburghardt

The requirement is already removed in CIS RHEL9. It should also be removed from RHEL8.

Feb 23 '23 16:02 marcusburghardt