Check: GEN006225
Solaris 10 SPARC STIG:
GEN006225
(in versions v2 r4 through v1 r19)
Title
Samba must be configured to use an authentication mechanism other than "share." (Cat II impact)
Discussion
Samba share authentication does not provide for individual user identification and must not be used.
Check Content
Check the security mode of the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations. Procedure: # grep -i security /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf If the security mode is share, this is a finding.
Fix Text
Edit the smb.conf file and change the security setting to user or another valid setting other than share.
Additional Identifiers
Rule ID: SV-227027r603265_rule
Vulnerability ID: V-227027
Group Title: SRG-OS-000480
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |