Detections
Analytics

1.92 SOL-11.1-040250

Information

The default umask for system and users must be 077.

GROUP ID: V-216106RULE ID: SV-216106r959010

Setting a very secure default value for umask ensures that users make a conscious choice about their file permissions.

Solution

The root role is required.

Edit local and global initialization files containing "umask" and change them to use 077.

pfedit /etc/default/login

Insert the lineUMASK=077

pfedit [user initialization file]

Insert the lineumask 077

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216106r959010_rule, STIG-ID|SOL-11.1-040250, Vuln-ID|V-216106

Plugin: Unix

Control ID: 3a129f92bb5902d741af282c673ecbe7c76ac5ba78854dd1fce3ea7edea6ff46