GEN006160 - The /etc/samba/passdb.tdb and /etc/samba.secrets.tdb files must be owned by root - '/etc/samba/passdb.tdb'

Information

If the 'smbpasswd' file is not owned by root, it may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.

Solution

Use the chown command to configure the files maintained by smbpasswd.
For instance:
# chown root /etc/samba/passdb.tdb /etc/samba/secrets.tdb

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-1029, Rule-ID|SV-37879r1_rule, STIG-ID|GEN006160, Vuln-ID|V-1029

Plugin: Unix

Control ID: e4e00c03f255992455045280df8c98244d22c75cda8c859afa0a18fb25db01f1