Enable a Warning Banner for the FTP service

LowLevel 1Automatedsolaris

Description

The action for this item sets a warning message for FTP users before they log in. If FTP is permitted for use in your environment, it is important to ensure that Warning Banners inform users who are attempting to access the system of their legal status regarding using the system. Audit: pattern match on /etc/proftpd.conf as described in the CIS audit procedure.

How it is checked

Audit method: File pattern

File: /etc/proftpd.conf
Pattern: (?m)^\s*DisplayConnect\s+/etc/issue

How it is fixed

Fix method: Guidance or infrastructure patch

Perform the following to implement the recommended state: # echo "DisplayConnect /etc/issue" >> /etc/proftpd.conf # svcadm restart ftp

Properties

Operating systems: Any
Tags: solarisnetwork
Reference: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 8.2 Enable a Warning Banner for the FTP service

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target solaris