Ensure tftp Daemon Uses Secure Mode If running the 'tftp' service is necessary, it should be configured to change its root directory at startup. To do so, ensure '/etc/xinetd.d/tftp' includes '-s' as a command line argument, as shown in the following example (which is also the default): 'server_args = -s /var/lib/tftpboot' Using the '-s' option causes the TFTP service to only serve files from the given directory. Serving files from an intentionally-specified directory reduces the risk of sharing files which should remain private. Fix: No Remediation Info oval:org.secpod.oval:def:48309 oval:org.secpod.oval:def:48309 oval:org.secpod.oval:def:48760 SCAP Repo OVAL Definition 2018-11-08