2.2.19 Ensure tftp server is not enabled (Scored)

Level 1 - Server
Level 1 - Workstation 

Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol, typically used to automatically transfer configuration or boot machines from a boot server. The packages tftp and atftp are both used to define and support a TFTP server.

TFTP does not support authentication nor does it ensure the confidentiality or integrity of data. It is recommended that TFTP be removed, unless there is a specific need for TFTP. In that case, extreme caution must be used when configuring the services.

Run the following command and verify result is not “enabled”:

# systemctl is-enabled tftp.socket
disabled

Run the following commands to disable tftp:

# systemctl disable tftp.socket
  • centos7/2/2/19.txt
  • Last modified: 2017/05/04 16:58
  • by 127.0.0.1