TMA-FREEBSD-2.2.2
Ensure ftp server services are not in use
Mô tả
FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server). FreeBSD ships with one basic ftpd in the base system and there is also the famous vsftpd available through package. Audit: ftp must not be enabled in /etc/inetd.conf and vsftpd must be absent or not enabled.
Cách kiểm tra
Phương pháp kiểm tra: Lệnh shell
command -v pkg >/dev/null 2>&1 || exit 1; command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; grep -Eq "^ftp[[:space:]]" /etc/inetd.conf 2>/dev/null && r="ftp enabled in /etc/inetd.conf"; if [ -n "$(pkg query -g %n 'vsftpd*' 2>/dev/null)" ]; then v=$(sysrc -q -n vsftpd_enable 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="vsftpd_enable=$v";; esac; fi; echo "$r"- Đầu ra mong đợi
compliant
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Run the following commands to stop vsftpd / vsftpd6 and remove vsftpd packages: # service onestop vsftpd # service onestop vsftpd6 # pkg remove -g 'vsftpd*' -OR- -IF- the packages is required as a dependency: Run the following commands to stop and disable the vsftpd or vsftpd6 service: # service vsftpd onestop # service vsftpd6 onestop # service vsftpd onedisable # service vsftpd6 onedisable Note: Other ftp server packages may exist. If not required and authorized by local site policy, they should also be removed. If the package is required for a dependency, the service should be stopped and disabled.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- freebsdnetwork
- Tham chiếu
- CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.2 Ensure ftp server services are not in use
Kiểm tra máy này
Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.
tmaegis scan --target freebsd