lowservicesverified ✓rollback-safe
Ensure tftp client is not installed
package-tftp-removed · RHEL ≥ 8 · 2 impls
Description
The tftp package provides a TFTP client. TFTP is an unauthenticated file transfer protocol and should not be used.
Rationale
TFTP provides no authentication or encryption. It should only be used in isolated network segments for specific purposes like PXE boot. The client package is rarely needed.
Check → Remediate
Checkpackage_state
- name:
- tftp
- state:
- absent
Remediatepackage_absent
- name:
- tftp
Framework references
CIS
rhel9 2.2.5rhel8 2.2.5rhel10 2.2.4
STIG
V-280949 / RHEL-10-200070
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#package#tftp#client#security