Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-38656 | RHEL-06-000272 | SV-50457r1_rule | Low |
Description |
---|
Packet signing can prevent man-in-the-middle attacks which modify SMB packets in transit. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2017-04-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-43606r1_fix) |
---|
To require samba clients running "smbclient" to use packet signing, add the following to the "[global]" section of the Samba configuration file in "/etc/samba/smb.conf": client signing = mandatory Requiring samba clients such as "smbclient" to use packet signing ensures they can only communicate with servers that support packet signing. |