UCF STIG Viewer Logo

The system default umask for the bash shell must be 077.


Finding ID Version Rule ID IA Controls Severity
V-218073 RHEL-06-000342 SV-218073r505923_rule Low
The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and/or written to by unauthorized users.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2020-09-03


Check Text ( C-19554r377234_chk )
Verify the "umask" setting is configured correctly in the "/etc/bashrc" file by running the following command:

# grep "umask" /etc/bashrc

All output must show the value of "umask" set to 077, as shown below:

# grep "umask" /etc/bashrc
umask 077
umask 077

If the above command returns no output, or if the umask is configured incorrectly, this is a finding.
Fix Text (F-19552r377235_fix)
To ensure the default umask for users of the Bash shell is set properly, add or correct the "umask" setting in "/etc/bashrc" to read as follows:

umask 077