Description
FTP (File Transfer Protocol) is a traditional and widely used standard tool for
transferring files between a server and clients over a network, especially where no
authentication is necessary (permits anonymous users to connect to a server).
The ftp package can be removed with the following command:
Rationale
FTP does not protect the confidentiality of data or authentication credentials. It
is recommended SFTP be used if file transfer is required. Unless there is a need
to run the system as a FTP server (for example, to allow anonymous downloads), it is
recommended that the package be removed to reduce the potential attack surface.
Shell script
The following script can be run on the host to remediate the issue.
# CAUTION: This remediation script will remove ftp
# from the system, and may remove any packages
# that depend on ftp. Execute this
# remediation AFTER testing on a non-production
# system!
if rpm -q --quiet "ftp" ; then
dnf remove -y "ftp"
fi
Ansible playbook
The following playbook can be run with Ansible to remediate the issue.
- name: Ensure ftp is removed
package:
name: ftp
state: absent
tags:
- CCE-86075-9
- disable\_strategy
- low\_complexity
- low\_disruption
- low\_severity
- no\_reboot\_needed
- package\_ftp\_removed
