Detections
Analytics

1.259 OL09-00-002304

Information

OL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

GROUP ID: V-271696
RULE ID: SV-271696r1091800

Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.

Solution

Configure OL 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to "077":

UMASK 077

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-271696r1091800_rule, STIG-ID|OL09-00-002304, Vuln-ID|V-271696

Plugin: Unix

Control ID: e9cd59b1de9d7c0ca52e693a6c89e9140d6e4b6db0b875b578e8bc55a863904f