Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Samba must be configured to use an authentication mechanism other than "share."
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22499 | GEN006225 | SV-37891r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Samba share authentication does not provide for individual user identification and must not be used. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2016-12-16 |
Details
| Check Text ( C-37117r1_chk ) |
|---|
| Check the security mode of the Samba configuration. # grep -i security /etc/samba/smb.conf If the security mode is "share", this is a finding. |
| Fix Text (F-32385r1_fix) |
|---|
| Edit the "/etc/samba/smb.conf" file and change the "security" setting to "user" or another valid setting other than "share". |