GEN004950 - The ftpusers file must not have an extended ACL.

Information

Excessive permissions on the ftpusers file could permit unauthorized modification. Unauthorized modification could result in Denial of Service to authorized FTP users or permit unauthorized users to access the FTP service.

Solution

Remove the extended ACL from the ftpusers file and disable extended permissions.

#acledit /etc/ftpusers

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22445, Rule-ID|SV-38812r1_rule, STIG-ID|GEN004950, Vuln-ID|V-22445

Plugin: Unix

Control ID: 0e45f0d829b42ac0618aea7691e32b6f09ce3ff1289955f2e6f7326fd2a6d18f