Detections
Analytics
1.92 SOL-11.1-040250
Information
The default umask for system and users must be 077.GROUP ID: V-216341
RULE ID: SV-216341r959010
Setting a very secure default value for umask ensures that users make a conscious choice about their file permissions.
Solution
The root role is required.Edit local and global initialization files containing "umask" and change them to use 077.
# pfedit /etc/default/login
Insert the line
UMASK=077 # pfedit [user initialization file]
Insert the line
umask 077
See Also
Item Details
Audit Name: CIS Solaris 11 SPARC STIG v1.0.0 CAT II
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216341r959010_rule, STIG-ID|SOL-11.1-040250, Vuln-ID|V-216341
Plugin: Unix
Control ID: edae9c95d6ca8a0691ba312ca17a7316c7ce1b7944ffb7eac2184b24ce7badbd