SRG-OS-000480-GPOS-00228
The operating system must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
Canonical Source
SV-203781r991590_rule ( from General Purpose Operating System Security Requirements Guide )Description
Setting the most restrictive default permissions ensures that when new accounts are created they do not have unnecessary access.