Detections
Analytics
GEN005120 - The TFTP daemon must be configured to vendor specifications, including a dedicated TFTP user account, a non-login shell, such as /bin/false, and a home directory owned by the TFTP user - a non-login shell
Information
If TFTP has a valid shell, it increases the likelihood of someone logging to the TFTP account and compromising the system.Solution
Create a TFTP user account if none exists.Assign a non-login shell to the TFTP user account, such as /bin/false.
Assign a home directory to the TFTP user account.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220052r603265_rule, STIG-ID|GEN005120, STIG-Legacy|SV-39825, STIG-Legacy|V-849, Vuln-ID|V-220052
Plugin: Unix
Control ID: ca737a452e353feb37738c3bb8691d5aa46f15f49f75b60dd62013718cbed1ac