Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

The Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide (V1 R8) has 439 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

439STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R8

CurrentPublished Wed Sep 30 2026

AlmaLinux OS 9 must not have a Trivial File Transfer Protocol (TFTP) client package installed.

Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

Assessment Title

Rule Text

AlmaLinux OS 9 must not have a Trivial File Transfer Protocol (TFTP) client package installed.

Description

Discussion Text

If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-269338

Rule

SV-269338r1050220_rule

Severity

medium

Rule Version

ALMA-09-029170

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that the tftp package is not installed with the following command:

$ dnf list --installed tftp

If the "tftp" package is installed, this is a finding.

Implementation Procedure

Fix Text

Remove the tftp package with the following command:

$ dnf remove tftp

STIG check 228 of 439 in the Cloud Linux AlmaLinux OS 9 STIG checklist

← Previous · V-269336AlmaLinux OS 9 must not have the sendmail package installed.Next · V-269339 →AlmaLinux OS 9 must not have the cups package installed.