Ensure ftp server services are not in use

높음레벨 1자동freebsd

설명

FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server). FreeBSD ships with one basic ftpd in the base system and there is also the famous vsftpd available through package. Audit: ftp must not be enabled in /etc/inetd.conf and vsftpd must be absent or not enabled.

점검 방법

감사 방식: 셸 명령

shell

command -v pkg >/dev/null 2>&1 || exit 1; command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; grep -Eq "^ftp[[:space:]]" /etc/inetd.conf 2>/dev/null && r="ftp enabled in /etc/inetd.conf"; if [ -n "$(pkg query -g %n 'vsftpd*' 2>/dev/null)" ]; then v=$(sysrc -q -n vsftpd_enable 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="vsftpd_enable=$v";; esac; fi; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Run the following commands to stop vsftpd / vsftpd6 and remove vsftpd packages: # service onestop vsftpd # service onestop vsftpd6 # pkg remove -g 'vsftpd*' -OR- -IF- the packages is required as a dependency: Run the following commands to stop and disable the vsftpd or vsftpd6 service: # service vsftpd onestop # service vsftpd6 onestop # service vsftpd onedisable # service vsftpd6 onedisable Note: Other ftp server packages may exist. If not required and authorized by local site policy, they should also be removed. If the package is required for a dependency, the service should be stopped and disabled.

속성

운영 체제: 모두
태그: freebsdnetwork
참고 자료: CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.2 Ensure ftp server services are not in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target freebsd