lowservicesverified ✓rollback-safe
Ensure ftp client is not installed
package-ftp-removed · RHEL ≥ 8 · 2 impls
Description
The ftp package provides the FTP client which transmits credentials in cleartext. This package should not be installed unless absolutely required.
Rationale
FTP transmits usernames and passwords in cleartext, making credentials visible to network sniffers. Secure alternatives like SFTP or SCP should be used instead.
Check → Remediate
Checkpackage_state
- name:
- ftp
- state:
- absent
Remediatepackage_absent
- name:
- ftp
Framework references
CIS
rhel9 2.2.1rhel8 2.2.1rhel10 2.2.1
NIST 800-53
CM-7IA-5
Live verification
rhel10:checkrhel8:checkrhel9:check
#package#ftp#client#security