highservicesverified ✓rollback-safe
Disable TFTP server
service-disable-tftp · RHEL ≥ 8 · 1 impl
Description
TFTP (Trivial File Transfer Protocol) is a simple file transfer protocol with no authentication. It should be disabled unless specifically required.
Rationale
TFTP provides no authentication or encryption. An attacker could download sensitive files or upload malicious content.
Check → Remediate
Checkservice_state
- name:
- tftp.socket
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- tftp.socket
Framework references
CIS
rhel8 2.1.17rhel9 2.1.16rhel10 2.1.16
NIST 800-53
CM-7IA-5
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#tftp#attack-surface