Check: RHEL-06-000223
Red Hat Enterprise Linux 6 STIG:
RHEL-06-000223
(in versions v2 r2 through v1 r24)
Title
The TFTP service must not be running. (Cat II impact)
Discussion
Disabling the "tftp" service ensures the system is not acting as a tftp server, which does not provide encryption or authentication.
Check Content
To check that the "tftp" service is disabled in system boot configuration, run the following command: # chkconfig "tftp" --list Output should indicate the "tftp" service has either not been installed, or has been disabled, as shown in the example below: # chkconfig "tftp" --list tftp off OR error reading information on service tftp: No such file or directory If the service is running and not documented and approved by the ISSO, this is a finding.
Fix Text
The "tftp" service should be disabled. The "tftp" service can be disabled with the following command: # chkconfig tftp off
Additional Identifiers
Rule ID: SV-217992r603264_rule
Vulnerability ID: V-217992
Group Title: SRG-OS-000095
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000072 |
The organization ensures that users protect information about remote access mechanisms from unauthorized use and disclosure. |
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
| CCI-000382 |
The organization configures the information system to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services. |
| CCI-001436 |
The organization disables organization-defined networking protocols within the information system deemed to be nonsecure except for explicitly identified components in support of specific operational requirements. |