The TFTP service daemon must not be installed unless required.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
---|---|---|---|---|---|---|
high | V-216291 | SRG-OS-000480 | SOL-11.1-020140 | SV-216291r959010_rule | 2024-11-25 | 3 |
Description |
---|
TFTP is an insecure protocol. |
ℹ️ Check |
---|
Determine if the TFTP package is installed. # pkg list service/network/tftp If an installed package named "/service/network/tftp" is listed and not required for operations, this is a finding. |
✔️ Fix |
---|
The Software Installation Profile is required. # pfexec pkg uninstall install/installadm # pfexec pkg uninstall service/network/tftp |