cis-ubuntu1204-v110-13-9

name	cis-ubuntu1204-v110-13-9
description	Check Permissions on User .netrc Files
category	cis-os-hardening
version	1.1.0
author	cyberstrike-official
tags	["cis","ubuntu",12.04,"linux","user-management","netrc","permissions","file-permissions","ftp"]
cis_id	13.9
cis_benchmark	CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

13.9 Check Permissions on User .netrc Files (Scored)

Profile Applicability

• Level 1

Description

While the system administrator can establish secure permissions for users' .netrc files, the users can easily override these.

Rationale

.netrc files may contain unencrypted passwords that may be used to attack other systems.

Audit Procedure

Using Command Line

#!/bin/bash
for dir in `/bin/cat /etc/passwd | /bin/egrep -v '(root|sync|halt|shutdown)' |\
    /usr/bin/awk -F: '($7 != "/usr/sbin/nologin") { print $6 }'`; do
for file in $dir/.netrc; do
        if [ ! -h "$file" -a -f "$file" ]; then
          fileperm=`/bin/ls -ld $file | /usr/bin/cut -f1 -d" "`
if [ `echo $fileperm | /usr/bin/cut -c5 ` != "-" ]           then
              echo "Group Read set on $file"
fi
          if [ `echo $fileperm | /usr/bin/cut -c6 ` != "-" ]
then
              echo "Group Write set on $file"
fi
          if [ `echo $fileperm | /usr/bin/cut -c7 ` != "-" ]

               

           [ `  | /usr/bin/cut -c8 ` !=  ]

               

           [ `  | /usr/bin/cut -c9 ` !=  ]

               

           [ `  | /usr/bin/cut -c10 ` !=  ]