UCF STIG Viewer Logo

The ftpusers file must exist.


Overview

Finding ID Version Rule ID IA Controls Severity
V-840 GEN004880 SV-28403r1_rule ECCD-1 ECCD-2 Medium
Description
The ftpusers file contains a list of accounts not allowed to use FTP to transfer files. If this file does not exist, then unauthorized accounts can utilize FTP.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-28645r1_chk )
Check for the existence of the ftpusers file.
# ls -l /etc/ftpusers
If the ftpusers file does not exist, this is a finding.
Fix Text (F-25674r1_fix)
Create a /etc/ftpusers file containing a list of accounts not authorized for FTP.