The tftp package must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-240419 | VRAU-SL-000490 | SV-240419r670998_rule | Medium |
| Description |
|---|
| The Trivial File Transfer Protocol (TFTP) is normally used only for booting diskless workstations and for getting or saving network component configuration files. Disabling the "tftp" protocol service ensures the system is not acting over tftp, which does not provide encryption or authentication. |
| STIG | Date |
|---|---|
| VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2021-06-24 |
Details
| Check Text ( C-43652r670996_chk ) |
|---|
| Check if "tftp" is installed: # rpm -q tftp If there is a "tftp" package listed, this is a finding. |
| Fix Text (F-43611r670997_fix) |
|---|
| To remove the "tftp" package use the following command: rpm -e tftp |