A MyCloud EX2 showed up on a security scan for allowing null sessions. I had turned off all guest access, but the null passwords setting is still set to yes in /etc/samba/smb.conf. I’ve tried modifying the file, and although it seems to work, the changes are erased on reboot. WD support said the OS is read-only. Is there no way to turn null passwords off on the EX2? If not, we’re going to have to take it down, unfortunately.
Thanks in advance for any help!