Detections
Analytics

1.432 RHEL-10-800310

Information

RHEL 10 must be configured to operate in secure mode if the Trivial File Transfer Protocol (TFTP) server service is required.

GROUP ID: V-281363RULE ID: SV-281363r1195454

Restricting TFTP to a specific directory prevents remote users from copying, transferring, or overwriting system files.

Solution

Configure RHEL 10 TFTP to operate in secure mode with the following command:

$ sudo systemctl edit tftp.service

In the editor, enter the following:

[Service]ExecStart=/usr/sbin/in.tftpd -s /var/lib/tftpboot

After making changes, reload the systemd daemon and restart the TFTP service as follows:

$ sudo systemctl daemon-reload $ sudo systemctl restart tftp.service

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000197, Rule-ID|SV-281363r1195454_rule, STIG-ID|RHEL-10-800310, Vuln-ID|V-281363

Plugin: Unix

Control ID: 696cfbc78f774f3eff19435efb5726c0d70155e02f976bfd9a11fea923f1307a