Detections
Analytics

GEN004930 - The ftpusers file must be group-owned by bin, sys, or system.

Information

If the ftpusers file is not group-owned by a system group, an unauthorized user may modify the file to allow unauthorized accounts to use FTP.

Solution

Change the group owner of the ftpusers file.

Procedure:
# chgrp system /etc/ftpusers

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22444, Rule-ID|SV-39180r1_rule, STIG-ID|GEN004930, Vuln-ID|V-22444

Plugin: Unix

Control ID: 5e6f6ecb550c6c69e39b88634d617a8dc1dbe5ba2b31652e6c5d3df6205643df