UCF STIG Viewer Logo

Samba must be configured to not allow guest access to shares.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22501 GEN006235 SV-35112r1_rule ECSC-1 Medium
Description
Guest access to shares permits anonymous access and is not permitted.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-36707r1_chk )
Check the guest setting the Samba configuration.
# cat /etc/opt/samba/smb.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v "^#" | grep -i "^guest ok = yes"

If the setting exists and is set to yes, this is a finding.
Fix Text (F-32084r1_fix)
Edit the /etc/opt/samba/smb.conf file and change the guest ok setting to no, for example:

guest ok = no