An XCCDF Group - A logical subset of the XCCDF Benchmark
/etc/vsftpd.conf
/etc/vsftpd/vsftpd.conf
iptables
/etc/sysconfig/iptables
/etc/sysconfig/ip6tables
-A INPUT -m state --state NEW -p tcp --dport 21 -j ACCEPT
/etc/sysconfig/iptables-config
IPTABLES_MODULES="ip_conntrack_ftp"
write_enable=NO
vsftpd
xferlog_enable=YES xferlog_std_format=NO log_ftp_protocol=YES
banner_file=/etc/issue
userlist_enable=YES userlist_file=/etc/vsftp.ftpusers userlist_deny=NO
/etc/vsftp.ftpusers
USERNAME
anonymous ftp
local_enable=NO