Rotate your device back to portrait to use STIG Vault.
The Red Hat Enterprise Linux 5 Security Technical Implementation Guide (V1 R18) has 571 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Check the shell for the anonymous FTP account.
Procedure:
# cat /etc/passwd | grep -i "^ftp:" | awk -F":" '{print$7}'
If the seventh field is empty (the entry ends with a ':') or if the seventh field does not contain one of the following, this is a finding:
/bin/false
/dev/null
/usr/bin/false
/bin/true
/sbin/nologin
Configure anonymous FTP accounts to use a non-functional shell. If necessary, edit the /etc/passwd file to remove any functioning shells associated with the ftp account and replace them with non-functioning shells, such as /dev/null.