Detections
Analytics
GEN004930 - The ftpusers file must be group-owned by root, bin, sys, or system - '/etc/vsftpd/ftpusers'
Information
If the ftpusers file is not group-owned by root or a system group, an unauthorized user may modify the file to allow unauthorized accounts to use FTP.Solution
Change the group owner of the ftpusers file.Procedure:
# chgrp root /etc/ftpusers /etc/vsftpd.ftpusers /etc/vsftpd/ftpusers
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22444, Rule-ID|SV-37538r1_rule, STIG-ID|GEN004930, Vuln-ID|V-22444
Plugin: Unix
Control ID: 357362928df7dd2921f85dd53c1089a5f248c6c54c92499e066479655e7d022d