AIX ftpd daemon must not be running.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| high | V-215259 | SRG-OS-000074-GPOS-00042 | AIX7-00-002060 | SV-215259r987796_rule | 2026-02-06 | 3 |
Description
The ftp service is used to transfer files from or to a remote machine. The username and passwords are passed over the network in clear text and therefore insecurely. Remote file transfer, if required, should be facilitated through SSH.
ℹ️ Check
Determine if the "ftp" daemon is running by running the following command:
# grep "^ftp[[:blank:]]" /etc/inetd.conf
If an entry is returned like the following line, the "ftp" daemon is running:
ftp stream tcp6 nowait root /usr/sbin/ftpd ftpd
If the above grep command returned a line that contains "ftpd", this is a finding.
✔️ Fix
Disable "ftp" daemon entry in "/etc/inetd.conf" using command:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'ftp' -p 'tcp6'
Reload the inetd process:
# refresh -s inetd