Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-1030 | GEN006220 | SV-40298r1_rule | ECSC-1 | Medium |
Description |
---|
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access. |
STIG | Date |
---|---|
Solaris 10 X86 Security Technical Implementation Guide | 2014-01-09 |
Check Text ( C-39151r1_chk ) |
---|
Examine the smb.conf file. # more /etc/sfw/smb.conf If the hosts option is not present to restrict access to a list of authorized hosts and networks, this is a finding. |
Fix Text (F-1184r2_fix) |
---|
Edit the smb.conf file and set the hosts option to permit only authorized hosts to access Samba. |