Detections
Analytics

1.232 ALMA-09-029170

Information

AlmaLinux OS 9 must not have a Trivial File Transfer Protocol (TFTP) client package installed.

GROUP ID: V-269338
RULE ID: SV-269338r1050220

If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.

Solution

Remove the tftp package with the following command:

$ dnf remove tftp

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269338r1050220_rule, STIG-ID|ALMA-09-029170, Vuln-ID|V-269338

Plugin: Unix

Control ID: 8c7e33c3cbe402e8151faa67dcb194b2ab422af31d2b7cb4c830cb539d2ab56f