Samba must be configured to not allow guest access to shares.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22501 | GEN006235 | SV-39245r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Guest access to shares permits anonymous access and is not permitted. |
| STIG | Date |
|---|---|
| Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Details
| Check Text ( C-38220r1_chk ) |
|---|
| Check the encryption setting the Samba configuration. # find / -name smb.conf # grep -i 'guest ok' < smb.conf file > If the setting exists and is set to 'yes', this is a finding. |
| Fix Text (F-33495r1_fix) |
|---|
| Edit the smb.conf file and change the "guest ok" setting to no. # vi < smb.conf file > |