UCF STIG Viewer Logo

The smbpasswd file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227929 GEN006160 SV-227929r603266_rule Medium
Description
If the smbpasswd file is not owned by root, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-30091r490207_chk )
Check the ownership of the smbpasswd file.

# ls -lL /etc/sfw/private/smbpasswd

If the smbpasswd file is not owned by root, this is a finding.
Fix Text (F-30079r490208_fix)
Use the chown command to configure the smb passwd file.
# chown root /etc/sfw/private/smbpasswd