UCF STIG Viewer Logo

The ftpusers file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227857 GEN004920 SV-227857r603266_rule Medium
Description
If the file ftpusers is not owned by root, an unauthorized user may modify the file to allow unauthorized accounts to use FTP.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-30019r489964_chk )
Check the ownership of the ftpusers file.
# ls -l /etc/ftpd/ftpusers
If the ftpusers file is not owned by root, this is a finding.
Fix Text (F-30007r489965_fix)
Change the owner of the ftpusers file to root.
# chown root /etc/ftpd/ftpusers