Skip to content

Commit

Permalink
Move SMB1 control to windows-baseline (#16)
Browse files Browse the repository at this point in the history
  • Loading branch information
yvovandoorn authored and chris-rock committed May 15, 2017
1 parent 8f9217f commit 02c9b30
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 2 deletions.
10 changes: 10 additions & 0 deletions controls/access_config.rb
Expand Up @@ -60,6 +60,16 @@
end
end

control 'windows-base-105' do
title 'SMB1 to Windows Shares is disabled'
desc 'All Windows Shares are Configured to disable the SMB1 protocol'
impact 1.0
describe registry_key('HKLM\System\CurrentControlSet\Services\LanManServer\Parameters') do
it { should exist }
its('SMB1') { should eq 0 }
end
end

## LSA Authentication
# @link: https://msdn.microsoft.com/en-us/library/windows/desktop/aa378326(v=vs.85).aspx

Expand Down
4 changes: 2 additions & 2 deletions inspec.yml
Expand Up @@ -6,7 +6,7 @@ maintainer: DevSec Hardening Framework Team
copyright: DevSec Hardening Framework Team
copyright_email: hello@dev-sec.io
license: Apache 2 license
summary: Baselin for best-preactice Windows OS hardening
version: 1.1.0
summary: Baseline for best-preactice Windows OS hardening
version: 1.1.1
supports:
- os-family: windows

0 comments on commit 02c9b30

Please sign in to comment.