Detections
Analytics

6.2.22 Ensure users' files and directories within the home directory permissions are 750 or more restrictive

Information

The operating system must be configured so that all files and directories contained in local interactive user home directories have a mode of 0750 or less permissive.

If a local interactive user files have excessive permissions, unintended users may be able to access or modify them.

Solution

Set the mode on files and directories in the local interactive user home directory with the following command:

Note: The example will be for the user smithj, who has a home directory of /home/smithj and is a member of the users group.

# chmod 0750 /home/smithj/<file>

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, CSCv7|14.6, Rule-ID|SV-204473r603261_rule, STIG-ID|RHEL-07-020680, Vuln-ID|V-204473

Plugin: Unix

Control ID: 0b017d81ff655bb5d39302cf26f3dc4051b772fc77456613b7f0212d40e59c7e