Disable Samba
An XCCDF Rule
Description
The smb service can be disabled with the following command:
$ sudo systemctl mask --now smb.service
Rationale
Running a Samba server provides a network-based avenue of attack, and should be disabled if not needed.
- ID
- xccdf_org.ssgproject.content_rule_service_smb_disabled
- Severity
- Low
- References
- Updated
Remediation - Puppet
include disable_smb
class disable_smb {
service {'smb':
enable => false,
ensure => 'stopped',
Remediation - OS Build Blueprint
[customizations.services]
disabled = ["smb"]
Remediation - Ansible
- name: Block Disable service smb
block:
- name: Disable service smb
block: