UCF STIG Viewer Logo

The /etc/smb.conf file must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1028 GEN006140 M6 SV-38184r1_rule ECLP-1 Medium
Description
If the smb.conf file has excessive permissions, the file may be maliciously modified and the Samba configuration could be compromised.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide 2013-04-09

Details

Check Text ( C-37588r1_chk )
Open a terminal session and enter the following command to verify the permissions of the /etc/smb.conf file.

ls -lL /etc/smb.conf

If the value is not set to 0644, this is a finding.
Fix Text (F-32830r1_fix)
Open a terminal session and enter the following command to set the mode of the smb.conf file.

chmod 644 /etc/smb.conf