Skip to content
Log In

Remove tftp Daemon

An XCCDF Rule

Description

Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol, typically used to automatically transfer configuration or boot files between systems. TFTP does not support authentication and can be easily hacked. The package tftp is a client program that allows for connections to a tftp server.

Rationale

It is recommended that TFTP be removed, unless there is a specific need for TFTP (such as a boot server). In that case, use extreme caution when configuring the services.

ID
xccdf_org.ssgproject.content_rule_package_tftp_removed
Severity
Low
References
Updated

Remediation Templates

An Ansible Snippet

- name: Ensure tftp is removed
  package:
    name: tftp
    state: absent
  tags:
  - PCI-DSSv4-2.2

script:kickstart

package remove tftp

script:bootc

dnf remove tftp

A Puppet Snippet

include remove_tftp
class remove_tftp {
  package { 'tftp':
    ensure => 'purged',
  }
}

Anaconda Pre-Install Instructions

package --remove=tftp

A Shell Script

# CAUTION: This remediation script will remove tftp
#	   from the system, and may remove any packages
#	   that depend on tftp. Execute this
#	   remediation AFTER testing on a non-production
#	   system!