SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

The SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide (V1 R12) has 550 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

550STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R12

CurrentPublished Fri Oct 26 2018

Samba must be configured to not allow guest access to shares.

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Assessment Title

Rule Text

Samba must be configured to not allow guest access to shares.

Description

Discussion Text

Guest access to shares permits anonymous access and is not permitted.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-22501

Rule

SV-46141r1_rule

Severity

medium

Rule Version

GEN006235

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the access to shares for Samba.
# grep -i 'guest ok' /etc/samba/smb.conf 
If the setting exists and is set to 'yes', this is a finding.

Implementation Procedure

Fix Text

Edit the "/etc/samba/smb.conf" file and change the "guest ok" setting to "no".

STIG check 247 of 550 in the SUSE Linux Enterprise Server v11 for System z STIG checklist

← Previous · V-22500Samba must be configured to use encrypted passwords.Next · V-22502 →The /etc/news/incoming.conf file must not have an extended ACL.