<def-group>
  <definition class="compliance" id="no_netrc_files" version="1">
    {{{ oval_metadata("The .netrc files contain login information used to auto-login into FTP servers and reside in the user's home directory. Any .netrc files should be removed.") }}}
    <criteria>
      <criterion test_ref="test_no_netrc_files_home" negate="true" />
    </criteria>
  </definition>
  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for .netrc in /home" id="test_no_netrc_files_home" version="1">
    <unix:object object_ref="object_no_netrc_files_home" />
  </unix:file_test>
  <unix:file_object comment="look for .netrc in /home" id="object_no_netrc_files_home" version="1">
    <unix:behaviors recurse="directories" recurse_direction="down" max_depth="1" recurse_file_system="all" />
    <unix:path operation="equals">/home</unix:path>
    <unix:filename operation="pattern match">^\.netrc$</unix:filename>
  </unix:file_object>
</def-group>
