The FTPS/FTP service on the system must be configured with the Department of Defense (DoD) login banner.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
RHEL-06-000348	RHEL-06-000348	RHEL-06-000348_rule		Medium

Description
This setting will cause the system greeting banner to be used for FTP connections as well.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2013-02-05

Details

Check Text ( C-RHEL-06-000348_chk )
To verify this configuration, run the following command: grep "banner_file" /etc/vsftpd/vsftpd.conf The output should show the value of "banner_file" is set to "/etc/issue", an example of which is shown below. # grep "banner_file" /etc/vsftpd/vsftpd.conf banner_file=/etc/issue If it does not, this is a finding.

Fix Text (F-RHEL-06-000348_fix)
Edit the vsftpd configuration file, which resides at "/etc/vsftpd/vsftpd.conf" by default. Add or correct the following configuration options. banner_file=/etc/issue