4.1.5.9 ftp

Information

This entry starts the ftpd daemon when required. This service is used for transferring files from/to a remote machine.

The recommendation is that ftp is disabled and sftp is used as a replacement file and directory copying mechanism.

Rationale:

This ftp service is used to transfer files from or to a remote machine. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the ftpd daemon should be disabled.

Solution

In /etc/inetd.conf, comment out the ftp entry:

chsubserver -r inetd -C /etc/inetd.conf -d -v 'ftp' -p 'tcp6'
refresh -s inetd

Default Value:

Uncommented

See Also

https://workbench.cisecurity.org/benchmarks/13069

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Unix

Control ID: a3e7c28d6f158af65577c26b27cd3c40d05374d961be88b4323fc076811dc0dc