UCF STIG Viewer Logo

The smb.conf file must use the hosts option to restrict access to Samba.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1030 GEN006220 SV-46139r1_rule ECSC-1 Medium
Description
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2013-04-18

Details

Check Text ( C-43398r1_chk )
Examine the "smb.conf" file.

# more /etc/samba/smb.conf

If the "hosts" option is not present to restrict access to a list of authorized hosts and networks, this is a finding.
Fix Text (F-39481r1_fix)
Edit the "/etc/samba/smb.conf" file and set the "hosts" option to permit only authorized hosts to access Samba.