should vsftpd be disabled in favour of sftp for security reasons?

["Robert P. J. Day" <rpjday@xxxxxxxxxxxxxx>]

  (another in an ongoing list of things i just want to clarify for the
sake of future courses taught on centos.)

  from this RHEL doc page:

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html

the reader is advised to, for the sake of security, remove/disable
vsftpd, ostensibly in favour of sftp/sftp-server.  really?

  i can obviously see disallowing stuff like telnet and rsh and
rlogin, that's a no-brainer.  but advising against vsftpd for the sake
of security?  i'm not sure i see the logic in that.  thoughts?

rday

-- 

========================================================================
Robert P. J. Day                               Waterloo, Ontario, CANADA

        Top-notch, inexpensive online Linux/OSS/kernel courses
                        http://crashcourse.ca

Twitter:                                       http://twitter.com/rpjday
LinkedIn:                               http://ca.linkedin.com/in/rpjday
========================================================================
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos