Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The FTP daemon must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216290 | SOL-11.1-020130 | SV-216290r959010_rule | High |
| Description |
|---|
| FTP is an insecure protocol. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2024-05-30 |
Details
| Check Text ( C-17526r370958_chk ) |
|---|
| Determine if the FTP package is installed. # pkg list service/network/ftp If an installed package named "service/network/ftp" is listed and not required for operations, this is a finding. |
| Fix Text (F-17524r370959_fix) |
|---|
| The Software Installation Profile is required. # pfexec pkg uninstall service/network/ftp |