Detections
Analytics

1.152 AZLX-23-002410

Information

Amazon Linux 2023 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

GROUP ID: V-274145RULE ID: SV-274145r1120423

Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.

Satisfies: SRG-OS-000480-GPOS-00228, SRG-OS-000480-GPOS-00230

Solution

Configure Amazon Linux 2023 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to "077":

UMASK 077

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-274145r1120423_rule, STIG-ID|AZLX-23-002410, Vuln-ID|V-274145

Plugin: Unix

Control ID: ee2447e8d096b3608a8fb393cc7005113657de5808da2448507f7bb1d14f92c6