Skip to content

Commit 77c3140

Browse files
committed
SEO pass
1 parent 8986d7b commit 77c3140

File tree

1 file changed

+12
-8
lines changed

1 file changed

+12
-8
lines changed

articles/storage/files/files-remove-smb1-linux.md

Lines changed: 12 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Secure your Azure and on-premises environments by removing SMB 1 on Linux
3-
description: Azure Files supports SMB 3.x and SMB 2.1, but not insecure legacy versions of SMB such as SMB 1. Before connecting to an Azure file share, you might wish to disable older versions of SMB such as SMB 1.
2+
title: Improve security by disabling SMB 1 on Linux clients
3+
description: Azure Files supports SMB 3.x and SMB 2.1, but not insecure legacy versions such as SMB 1. This article explains how to disable SMB 1 on Linux clients.
44
author: khdownie
55
ms.service: azure-file-storage
66
ms.custom: linux-related-content
@@ -9,15 +9,17 @@ ms.date: 02/23/2023
99
ms.author: kendownie
1010
---
1111

12-
# Remove SMB 1 on Linux
12+
# Disable SMB 1 on Linux clients
1313

14-
> [!CAUTION]
15-
> This article references CentOS, a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and plan accordingly. For more information, see the [CentOS End Of Life guidance](~/articles/virtual-machines/workloads/centos/centos-end-of-life.md).
16-
Many organizations and internet service providers (ISPs) block the port that SMB uses to communicate, port 445. This practice originates from security guidance about legacy and deprecated versions of the SMB protocol. Although SMB 3.x is an internet-safe protocol, older versions of SMB, especially SMB 1, aren't. SMB 1, also known as CIFS (Common Internet File System), is included with many Linux distributions.
14+
Many organizations and internet service providers (ISPs) block the port that SMB uses to communicate, port 445. This practice originates from security guidance about legacy and deprecated versions of the SMB protocol. Although SMB 3.x is an internet-safe protocol, older versions of SMB, especially SMB 1, aren't. SMB 1, also known as CIFS (Common Internet File System), is included with many Linux distributions.
15+
16+
SMB 1 is an outdated, inefficient, and insecure protocol. The good news is that Azure Files doesn't support SMB 1. Also, starting with Linux kernel version 4.18, Linux makes it possible to disable SMB 1. We [strongly recommend](https://aka.ms/stopusingsmb1) disabling the SMB 1 on your Linux clients before using SMB file shares in production.
1717

18-
SMB 1 is an outdated, inefficient, and insecure protocol. The good news is that Azure Files doesn't support SMB 1. Also, starting with Linux kernel version 4.18, Linux makes it possible to disable SMB 1. We always [strongly recommend](https://aka.ms/stopusingsmb1) disabling the SMB 1 on your Linux clients before using SMB file shares in production.
18+
> [!CAUTION]
19+
> This article references CentOS, a Linux distribution that will no longer be supported after June 2024. Please consider your use and plan accordingly. For more information, see the [CentOS End Of Life guidance](~/articles/virtual-machines/workloads/centos/centos-end-of-life.md).
1920
2021
## Linux distribution status
22+
2123
Starting with Linux kernel 4.18, the SMB kernel module, called `cifs` for legacy reasons, exposes a new module parameter (often referred to as *parm* by various external documentation) called `disable_legacy_dialects`. Although introduced in Linux kernel 4.18, some vendors have backported this change to older kernels that they support. The following table details the availability of this module parameter on common Linux distributions.
2224

2325
| Distribution | Can disable SMB 1 |
@@ -28,7 +30,7 @@ Starting with Linux kernel 4.18, the SMB kernel module, called `cifs` for legacy
2830
| Debian 8-9 | No |
2931
| Debian 10+ | Yes |
3032
| Fedora 29+ | Yes |
31-
| CentOS 7 | No |
33+
| CentOS 7 | No |
3234
| CentOS 8+ | Yes |
3335
| Red Hat Enterprise Linux 6.x-7.x | No |
3436
| Red Hat Enterprise Linux 8+ | Yes |
@@ -52,6 +54,7 @@ disable_legacy_dialects: To improve security it may be helpful to restrict the a
5254
```
5355

5456
## Remove SMB 1
57+
5558
Before disabling SMB 1, confirm that the SMB module isn't currently loaded on your system (which happens automatically if you've mounted an SMB share). Run the following command, which should output nothing if SMB isn't loaded:
5659

5760
```bash
@@ -96,6 +99,7 @@ cat /sys/module/cifs/parameters/disable_legacy_dialects
9699
```
97100

98101
## Next steps
102+
99103
See these links for more information about Azure Files:
100104

101105
- [Planning for an Azure Files deployment](storage-files-planning.md)

0 commit comments

Comments
 (0)