Detections
Analytics

GEN005120 - The TFTP daemon must be configured to vendor specs including a home directory owned by the TFTP user - 'tftp user exists'

Information

If TFTP has a valid shell, it increases the likelihood of someone logging to the TFTP account and compromising the system.

Solution

Create a TFTP user account if none exists.
Assign a non-login shell to the TFTP user account, such as /bin/false.
Assign a home directory to the TFTP user account.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, Rule-ID|SV-849r2_rule, STIG-ID|GEN005120, Vuln-ID|V-849

Plugin: Unix

Control ID: c9bc22b5026378bd0c791de101d2504f72776e692a08c9b54e558a1e1464b302