UCF STIG Viewer Logo

Samba must be configured to use an authentication mechanism other than "share."


Overview

Finding ID Version Rule ID IA Controls Severity
V-227934 GEN006225 SV-227934r603266_rule Medium
Description
Samba share authentication does not provide for individual user identification and must not be used.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-30096r490222_chk )
Check the security mode of the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations.

Procedure:
# grep -i security /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf
If the security mode is share, this is a finding.
Fix Text (F-30084r490223_fix)
Edit the smb.conf file and change the security setting to user or another valid setting other than share.