Detections
Analytics

GEN005120 - The TFTP daemon must be configured to vendor specifications, including a dedicated TFTP user account, a non-login shell, such as /bin/false, and a home directory owned by the TFTP user - dedicated TFTP account

Information

If TFTP has a valid shell, it increases the likelihood of someone logging to the TFTP account and compromising the system.

Solution

Create a TFTP user account if none exists.
Assign a non-login shell to the TFTP user account, such as /bin/false.
Assign a home directory to the TFTP user account.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220052r603265_rule, STIG-ID|GEN005120, STIG-Legacy|SV-39825, STIG-Legacy|V-849, Vuln-ID|V-220052

Plugin: Unix

Control ID: ca737a452e353feb37738c3bb8691d5aa46f15f49f75b60dd62013718cbed1ac