Detections
Analytics

1.368 OL08-00-040350

Information

If the Trivial File Transfer Protocol (TFTP) server is required, the OL 8 TFTP daemon must be configured to operate in secure mode.

GROUP ID: V-248902
RULE ID: SV-248902r991589

Restricting TFTP to a specific directory prevents remote users from copying, transferring, or overwriting system files.

Solution

Configure the TFTP daemon to operate in secure mode by adding the following line to "/etc/xinetd.d/tftp" (or modify the line to have the required value):

server_args = -s /var/lib/tftpboot

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248902r991589_rule, STIG-ID|OL08-00-040350, Vuln-ID|V-248902

Plugin: Unix

Control ID: 232a2b8e779efa1b44abe2a9dd3e35a0852d58fd73dbec24d28a4adad256451c