highservicesverified ✓rollback-safe
Disable FTP server
service-disable-vsftpd · RHEL ≥ 8 · 1 impl
Description
FTP is an insecure protocol that transmits credentials in clear text. The vsftpd service should be disabled in favor of secure alternatives like SFTP.
Rationale
FTP transmits data and credentials unencrypted. Attackers can intercept credentials and data. Use SFTP or SCP instead.
Check → Remediate
Checkservice_state
- name:
- vsftpd
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- vsftpd
Framework references
CIS
rhel8 2.1.7rhel9 2.1.7rhel10 2.1.7
NIST 800-53
CM-7IA-5
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#ftp#attack-surface