Quick Fix: Enhancing the Anonymous FTP Shell check so that it reports only when the shell specified to the Anonymous FTP user is not an approved shell by the user.

Products

• Control Compliance Suite Windows

Issue/Introduction

Enhancing the Anonymous FTP Shell check so that it reports only when the shell specified to the Anonymous FTP user is not an approved shell by the user.

Environment

CCS 11.1

Resolution

The requirement is to enhance the Anonymous FTP Shell check so that it reports only when the shell specified to the Anonymous FTP user is not an approved shell by the user.

This enhancement is provided in this Quick Fix (QF). Now, the Approved shells name list is added to the Anonymous FTP Shell check, where user can add the list of approved shells.  By default, it contains the /bin/false and the /sbin/nologin shells.  User can add any other shells as required.  When anonymous FTP users use any of these shells, no message is displayed.

This enhancement is provided with limited support.