Detections
Analytics
GEN006160 - The /var/private/smbpasswd file must be owned by root.
Information
If the smbpasswd file is not owned by root, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.Solution
Change the owner of the smbpasswd file to root.# chown root /var/private/smbpasswd
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-40379r1_rule, STIG-ID|GEN006160, Vuln-ID|V-1029
Plugin: Unix
Control ID: 53d5e341b98179fcf289eba909b2396232bd2db97003f57a2bf2a9edc70b60a0