Detections
Analytics

2.2.6 Ensure an ftp server is not installed

Information

FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server).

Unless there is a need to run the system as a FTP server, it is recommended that the package be removed to reduce the potential attack surface.

Solution

Run the following command to remove vsftpd :

# dnf remove vsftpd

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 62402632f0bab1e80fa7faafad6f1016ae49aed249f411ff5f0446c6de5e5deb