Macintosh OS X Workstation STIG, V1R1 

DISA Field Security Operations 

15 June 2004 

          Developed by DISA for the DOD 

(OSX1026SMB0001:  CAT II) The SA will disable smb if file sharing with Windows is not 

implemented. 

(OSX1026SMB0003:  CAT II) The SA will configure root as the owner of /etc/smb.conf. 

(OSX1026SMB0004:  CAT II)  The SA will configure root as the group owner of 

/etc/smb.conf. 

(OSX1026SMB0005:  CAT II) The SA will configure the permissions of /etc/smb.conf to 644, 

or more restrictive. 

(OSX1026SMB0006:  CAT II) The SA will set the immutable attribute on /etc/smb.conf. 

49

UNCLASSIFIED