UCF STIG Viewer Logo

The tftp package must not be installed.


Finding ID Version Rule ID IA Controls Severity
V-89615 VRAU-SL-000490 SV-100265r1_rule Medium
The Trivial File Transfer Protocol (TFTP) is normally used only for booting diskless workstations and for getting or saving network component configuration files. Disabling the "tftp" protocol service ensures the system is not acting over tftp, which does not provide encryption or authentication.
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2018-10-12


Check Text ( C-89307r1_chk )
Check if "tftp" is installed:

# rpm -q tftp

If there is a "tftp" package listed, this is a finding.
Fix Text (F-96357r1_fix)
To remove the "tftp" package use the following command:

rpm -e tftp