The smb.conf file must use the hosts option to restrict access to Samba.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1030	GEN006220	SV-46139r1_rule		Medium

Description
Samba increases the attack surface of the system and must be restricted to communicate only with systems requiring access.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-43398r1_chk )
Examine the "smb.conf" file. # more /etc/samba/smb.conf If the "hosts" option is not present to restrict access to a list of authorized hosts and networks, this is a finding.

Fix Text (F-39481r1_fix)
Edit the "/etc/samba/smb.conf" file and set the "hosts" option to permit only authorized hosts to access Samba.