Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-1030 | GEN006220 | SV-39237r1_rule | ECSC-1 | Medium |
Description |
---|
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access. |
STIG | Date |
---|---|
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2017-12-08 |
Check Text ( C-38211r1_chk ) |
---|
Examine the smb.conf file. # more /usr/lib/smb.conf If the hosts option is not present to restrict access to a list of authorized hosts and networks, this is a finding. |
Fix Text (F-1184r4_fix) |
---|
Edit the smb.conf file and set the hosts option to permit only authorized hosts to access Samba. |