GEN004930 - The ftpusers file must be group-owned by bin, sys, or system.

Information

If the ftpusers file is not group-owned by a system group, an unauthorized user may modify the file to allow unauthorized accounts to use FTP.

Solution

Change the group owner of the ftpusers file.
Procedure:
# chgrp system /etc/ftpusers

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-39180r1_rule, STIG-ID|GEN004930, Vuln-ID|V-22444

Plugin: Unix

Control ID: e3f23a72e663a336b56c97cd1420971717c8151b62c253304ee3ca4aa23827d4