UCF STIG Viewer Logo

The /etc/smbpasswd file must be group-owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1058 GEN006180 SV-1058r2_rule ECLP-1 Medium
Description
If the smbpasswd file is not group-owned by root, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-2051r2_chk )
Check smbpasswd ownership.

# find / -name smbpasswd
# ls -lL

If smbpasswd is not group-owned by root, this is a finding.
Fix Text (F-1212r2_fix)
Use the chgrp command to ensure the group owner of the smbpasswd file is root.

# chgrp root /etc/smbpasswd.