Detections
Analytics
GEN006180 - The /var/private/smbpasswd file must be group-owned by sys or system.
Information
If the smbpasswd file is not group-owned by root, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.Solution
Use the chgrp command to change the group owner of the smbpasswd file to system.# chgrp system /var/private/smbpasswd
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-39235r1_rule, STIG-ID|GEN006180, Vuln-ID|V-1058
Plugin: Unix
Control ID: 42432223b539f8c2f26623fd42210b9ca9429d27edeae78c9e91ccd20afe42a0