0095-samba-uninstalled-Ensure Samba is Not Installed¶

Rule ID¶

• 0095-samba-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• The Samba daemon allows system administrators to configure their Linux systems to share file systems and directories with Windows desktops. Samba publishes file systems and directories via the Server Message Block (SMB) protocol. Windows desktop users can mount these directories and file systems as lettered drives on their systems.

Scan Frequency¶

• 0 * * * *

Rationale¶

Risks¶

• Hacker Penetration
• Data Leakage
• Network Security
• Cryptomining Risk
• Botnet Risk

Audit Method¶

• Execute the following command to verify whether Samba is installed:

# rpm -q samba
package samba is not installed

Remediation¶

• Run the command to remove Samba:

# # yum remove samba

Impact¶

• None

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7
  9.2 Ensure Only Approved Ports, Protocols, and Services Are Running
  Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.