Detections
Analytics

1.132 ALMA-09-017620

Information

AlmaLinux OS 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

GROUP ID: V-269235
RULE ID: SV-269235r1050117

Setting the most restrictive default permissions ensures that when new accounts are created they do not have unnecessary access.

With a UMASK of 077, files will be created with 0600 permissions (owner read/write only) and directories will have 0700 permissions (owner read/write/execute only).

Solution

Configure AlmaLinux OS 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to "077":

UMASK 077

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-269235r1050117_rule, STIG-ID|ALMA-09-017620, Vuln-ID|V-269235

Plugin: Unix

Control ID: a846a6fad15c15518f129546d7d54b9c6379b4a92f616db36adb65d8f5a50bd9