UCF STIG Viewer Logo

The ftpusers file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-842 GEN004920 SV-28410r1_rule ECLP-1 Medium
Description
If the file ftpusers is not owned by root, an unauthorized user may modify the file to allow unauthorized accounts to use FTP.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28665r1_chk )
Check the ownership of the ftpusers file.
# ls -l /etc/ftpd/ftpusers
If the ftpusers file is not owned by root, this is a finding.
Fix Text (F-25695r1_fix)
Change the owner of the ftpusers file to root.
# chown root /etc/ftpd/ftpusers