The system default umask in /etc/profile must be 077.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-38647 | RHEL-06-000344 | SV-50448r1_rule | Low |
| Description |
|---|
| The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and/or written to by unauthorized users. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2015-09-09 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-43596r1_fix) |
|---|
| To ensure the default umask controlled by "/etc/profile" is set properly, add or correct the "umask" setting in "/etc/profile" to read as follows: umask 077 |