UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The smb.conf file must use the hosts option to restrict access to Samba.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1030 GEN006220 SV-40298r1_rule ECSC-1 Medium
Description
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2014-04-04

Details

Check Text ( C-39151r1_chk )
Examine the smb.conf file.

# more /etc/sfw/smb.conf

If the hosts option is not present to restrict access to a list of authorized hosts and networks, this is a finding.
Fix Text (F-1184r2_fix)
Edit the smb.conf file and set the hosts option to permit only authorized hosts to access Samba.