← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215280

CAT II (Medium)

Samba packages must be removed from AIX.

Rule ID

SV-215280r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

If the smbpasswd file has a mode more permissive than 0600, the smbpasswd file may be maliciously accessed or modified, potentially resulting in the compromise of Samba accounts.

Check Content

Run the following command to check if samba packages are installed on AIX:
# lslpp -l samba*

If the above command shows that samba packages are installed, this is a finding.

Fix Text

Run the following command to un-install the samba packages:
# installp -ug samba*