The ftpusers file must contain account names not allowed to use FTP.

From AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

Associated with: CCI-000225

SV-28406r1_rule The ftpusers file must contain account names not allowed to use FTP.

Vulnerability discussion

The ftpusers file contains a list of accounts not allowed to use FTP to transfer files. If the file does not contain the names of all accounts not authorized to use FTP, then unauthorized use of FTP may take place.

Check content

Check the contents of the ftpusers file. If the system has accounts not allowed to use FTP and are not listed in the ftpusers file, this is a finding. # more /etc/ftpusers

Fix text

Add accounts not allowed to use FTP to the /etc/ftpusers file.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.