Samba must be configured to not allow guest access to shares.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22501	GEN006235	SV-40297r2_rule	ECSC-1	Medium

Description
Guest access to shares permits anonymous access and is not permitted.

STIG	Date
SOLARIS 10 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-06-12

Details

Check Text ( C-39149r2_chk )
Check the encryption setting for the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations. Procedure: # grep -i 'guest ok' /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf If the setting exists and is set to yes, this is a finding.

Check Text ( C-39149r2_chk )

Check the encryption setting for the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations.

Procedure:
# grep -i 'guest ok' /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf
If the setting exists and is set to yes, this is a finding.

Fix Text (F-34294r2_fix)
Edit the smb.conf file and change the guest ok setting to no.