The AIX system must have no .netrc files on the system.

Unencrypted passwords for remote FTP servers may be stored in .netrc files. Policy requires passwords be encrypted in storage and not used in access scripts.

Check the system for the existence of any ".netrc" files by running the following command: # find / -name .netrc

If any ".netrc" file exists, this is a finding.

Remove all ".netrc" file(s): # find / -name .netrc -exec rm {} \;