Detections
Analytics

1.124 OL08-00-010731

Information

All OL 8 local interactive user home directory files must have mode "0750" or less permissive.

GROUP ID: V-248640
RULE ID: SV-248640r991589

Excessive permissions on local interactive user home directories may allow unauthorized access to user files by other users.

Solution

Set the mode on files and directories in the local interactive user home directory with the following command:

Note: The example will be for the user smithj, who has a home directory of "/home/smithj" and is a member of the users group.

$ sudo chmod 0750 /home/smithj/<file or directory>

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248640r991589_rule, STIG-ID|OL08-00-010731, Vuln-ID|V-248640

Plugin: Unix

Control ID: 492337ebce51319a746fa9402b7b5d6dc0c9dca3e2d8d50b672ee9309fd41f0f