UCF STIG Viewer Logo

The smb.conf file must use the hosts option to restrict access to Samba.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1030 GEN006220 SV-64055r1_rule Medium
Description
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52471r1_chk )
Examine the "smb.conf" file.

# more /etc/samba/smb.conf

If the "hosts" option is not present to restrict access to a list of authorized hosts and networks, this is a finding.
Fix Text (F-54585r1_fix)
Edit the "/etc/samba/smb.conf" file and set the "hosts" option to permit only authorized hosts to access Samba.