GEN005120 - The TFTP daemon must be configured to vendor specifications, including a dedicated TFTP user account, a non-login shell, such as /bin/false, and a home directory owned by the TFTP user.

Information

If TFTP has a valid shell, it increases the likelihood of someone logging to the TFTP account and compromising the system.

Solution

Create a TFTP user account if none exists.
Assign a non-login shell to the TFTP user account, such as /bin/false.
Assign a home directory to the TFTP user account.

Item Details

Audit Name: DISA STIG Solaris 10 X86 v2r4

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: 441c7922d6b5c0ad875ce9feed445cf7f021b7ec952fcf85af3e6534fb80bf72

Detections

Analytics

GEN005120 - The TFTP daemon must be configured to vendor specifications, including a dedicated TFTP user account, a non-login shell, such as /bin/false, and a home directory owned by the TFTP user.

Information

Solution

See Also

Item Details