Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Samba must be configured to use an authentication mechanism other than share.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22499 | GEN006225 | SV-26830r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Samba share authentication does not provide for individual user identification and must not be used. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-27812r1_chk ) |
|---|
| Check the security mode of the Samba configuration. # grep -i security /etc/smb.conf If the security mode is share, this is a finding. |
| Fix Text (F-24073r1_fix) |
|---|
| Edit the /etc/smb.conf file and change the security setting to user or another valid setting other than share. |