Detections
Analytics

1.152 RHEL-10-400325

Information

RHEL 10 must define default permissions for all authenticated users in such a way that the user can read and modify only their own files.

GROUP ID: V-281082RULE ID: SV-281082r1195406

Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.

Solution

Configure RHEL 10 to define default permissions for all authenticated users in such a way that the user can read and modify only their own files.

Add or edit the lines for the "umask" parameter in the "/etc/login.defs" file to "077":

umask 077

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281082r1195406_rule, STIG-ID|RHEL-10-400325, Vuln-ID|V-281082

Plugin: Unix

Control ID: a3facd6e6a6d94d8e5c7eb2b27582528b18c0ae8bb3fca92bd879981a8700d54