New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CCE-28326-7] tftp_daemon #28

Closed
macosforgebot opened this Issue Jun 3, 2013 · 3 comments

Comments

@macosforgebot
Copy link

macosforgebot commented Jun 3, 2013

@DewSecGitHub originally submitted this as ticket:27

  • Version: Beta
  • Keywords: Settings, Review

CCE#: CCE-28326-7
Setting Name: tftp_daemon
Description: Enables or disables the tftp daemon.

Parameters: N / A
Technical Mechanism: Use "launchctl unload -w" to unload the tftp.plist file in the LaunchDaemons directory.

Reference: NIST SCM rules for OSX.

Function: Network-Services

Rationale: Disabling reduces the attack surface.


SOHO: tftp daemon disabled
Enterprise: tftp daemon disabled
SSLF: tftp daemon disabled


Additional Mechanism: N / A


OVAL Content: N / A


Comment:

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Jun 3, 2013

@DewSecGitHub originally submitted this as comment:1:⁠ticket:27

  • Status changed from new to accepted
@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Jun 6, 2013

dubs@… originally submitted this as comment:2:⁠ticket:27


This step would stop NetBoot servers from functioning. Deployment servers would need an exception.

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Aug 6, 2014

blank@… originally submitted this as comment:3:⁠ticket:27

  • Status changed from accepted to closed
  • Resolution set to R8 - Completed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment