criticalservicesverified ✓rollback-safe
Ensure tftp-server package is not installed
pkg-tftp-server-absent · RHEL ≥ 8 · 2 impls
Description
The tftp-server package provides the TFTP daemon which allows file transfer using the insecure TFTP protocol. This package must not be installed.
Rationale
TFTP does not provide authentication or encryption. The tftp-server must not be installed as it presents an unnecessary security risk and attack surface.
Check → Remediate
Checkpackage_state
- name:
- tftp-server
- state:
- absent
Remediatepackage_absent
- name:
- tftp-server
Framework references
STIG
V-230533
NIST 800-53
CM-7
Live verification
rhel8:check
#package#tftp#server#attack-surface