Detections
Analytics
GEN006120 - The /usr/lib/smb.conf file must be group-owned by bin, sys, or system.
Information
If the group-owner of the smb.conf file is not root or a system group, the file may be maliciously modified and the Samba configuration could be compromised.Solution
Change the group owner of the smb.conf file.Procedure:
# chgrp system /usr/lib/smb.conf
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-1056, Rule-ID|SV-39231r1_rule, STIG-ID|GEN006120, Vuln-ID|V-1056
Plugin: Unix
Control ID: 98f92e25f34836b67f6cc75026dfb2736750e04fae6665dfd0c0f574580a8fb2