Ensure ftp server services are not in use

Méthode de vérification

Méthode d'audit: Commande shell

command -v pkg >/dev/null 2>&1 || exit 1; command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; grep -Eq "^ftp[[:space:]]" /etc/inetd.conf 2>/dev/null && r="ftp enabled in /etc/inetd.conf"; if [ -n "$(pkg query -g %n 'vsftpd*' 2>/dev/null)" ]; then v=$(sysrc -q -n vsftpd_enable 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="vsftpd_enable=$v";; esac; fi; echo "$r"

Sortie attendue

compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Run the following commands to stop vsftpd / vsftpd6 and remove vsftpd packages: # service onestop vsftpd # service onestop vsftpd6 # pkg remove -g 'vsftpd*' -OR- -IF- the packages is required as a dependency: Run the following commands to stop and disable the vsftpd or vsftpd6 service: # service vsftpd onestop # service vsftpd6 onestop # service vsftpd onedisable # service vsftpd6 onedisable Note: Other ftp server packages may exist. If not required and authorized by local site policy, they should also be removed. If the package is required for a dependency, the service should be stopped and disabled.

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target freebsd