Detections
Analytics
GEN006230 - Samba must be configured to use encrypted passwords.
Information
Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.Solution
Edit the '/etc/samba/smb.conf' file and change the 'encrypt passwords' setting to 'yes'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip
Item Details
Audit Name: DISA STIG for Oracle Linux 5 v2r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-218649r603259_rule, STIG-ID|GEN006230, STIG-Legacy|SV-64041, STIG-Legacy|V-22500, Vuln-ID|V-218649
Plugin: Unix
Control ID: fe7c44034da034dcce621da5873d113b29ca6d8e4c5ec49125e4ee72a385409a