Detections
Analytics
GEN006180 - The smbpasswd file must be group-owned by root.
Information
If the smbpasswd file is not group-owned by root, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.Solution
Use the chgrp command to ensure the group owner of the smbpasswd file is root.# chgrp root /etc/sfw/private/smbpasswd
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227023r603265_rule, STIG-ID|GEN006180, STIG-Legacy|SV-40287, STIG-Legacy|V-1058, Vuln-ID|V-227023
Plugin: Unix
Control ID: 3c11f068ee4e74c4f9d3840b8fe5f6d9e1940335302daa72bb083eee24913110