UCF STIG Viewer Logo

The tftp package must not be installed.


Finding ID Version Rule ID IA Controls Severity
V-240419 VRAU-SL-000490 SV-240419r670998_rule Medium
The Trivial File Transfer Protocol (TFTP) is normally used only for booting diskless workstations and for getting or saving network component configuration files. Disabling the "tftp" protocol service ensures the system is not acting over tftp, which does not provide encryption or authentication.
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2023-09-22


Check Text ( C-43652r670996_chk )
Check if "tftp" is installed:

# rpm -q tftp

If there is a "tftp" package listed, this is a finding.
Fix Text (F-43611r670997_fix)
To remove the "tftp" package use the following command:

rpm -e tftp