TMAegis
freebsd için daha fazla kural

TMA-FREEBSD-2.2.2

Ensure ftp server services are not in use

YüksekDüzey 1Otomatikfreebsd

Açıklama

FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server). FreeBSD ships with one basic ftpd in the base system and there is also the famous vsftpd available through package. Audit: ftp must not be enabled in /etc/inetd.conf and vsftpd must be absent or not enabled.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell
command -v pkg >/dev/null 2>&1 || exit 1; command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; grep -Eq "^ftp[[:space:]]" /etc/inetd.conf 2>/dev/null && r="ftp enabled in /etc/inetd.conf"; if [ -n "$(pkg query -g %n 'vsftpd*' 2>/dev/null)" ]; then v=$(sysrc -q -n vsftpd_enable 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="vsftpd_enable=$v";; esac; fi; echo "$r"
Beklenen çıktı
compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Run the following commands to stop vsftpd / vsftpd6 and remove vsftpd packages: # service onestop vsftpd # service onestop vsftpd6 # pkg remove -g 'vsftpd*' -OR- -IF- the packages is required as a dependency: Run the following commands to stop and disable the vsftpd or vsftpd6 service: # service vsftpd onestop # service vsftpd6 onestop # service vsftpd onedisable # service vsftpd6 onedisable Note: Other ftp server packages may exist. If not required and authorized by local site policy, they should also be removed. If the package is required for a dependency, the service should be stopped and disabled.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
freebsdnetwork
Referans
CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.2 Ensure ftp server services are not in use

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell
tmaegis scan --target freebsd