The smb.conf file must use the hosts option to restrict access to Samba.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1030 | GEN006220 | SV-39237r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access. |
| STIG | Date |
|---|---|
| AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-09-18 |
Details
| Check Text ( C-38211r1_chk ) |
|---|
| Examine the smb.conf file. # more /usr/lib/smb.conf If the hosts option is not present to restrict access to a list of authorized hosts and networks, this is a finding. |
| Fix Text (F-1184r4_fix) |
|---|
| Edit the smb.conf file and set the hosts option to permit only authorized hosts to access Samba. |