The yast2-tftp-server package must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-240418 | VRAU-SL-000475 | SV-240418r670995_rule | Medium |
| Description |
|---|
| Removing the "yast2-tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services. |
| STIG | Date |
|---|---|
| VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2021-06-24 |
Details
| Check Text ( C-43651r670993_chk ) |
|---|
| Check if "yast2-tftp-server" is installed: # rpm -q yast2-tftp-server If a "yast2-tftp-server" package is listed, this is a finding. |
| Fix Text (F-43610r670994_fix) |
|---|
| To remove the "yast2-tftp-server" package, use the following command: rpm -e yast2-tftp-server |