Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of OpenEmbedded
System Settings
Account and Access Control
Secure Session Configuration Files for Login Accounts
Ensure that Users Have Sensible Umask Values
Ensure the Default Umask is Set Correctly in /etc/profile
Ensure the Default Umask is Set Correctly in /etc/profile
An XCCDF Rule
Details
Profiles
Prose
Ensure the Default Umask is Set Correctly in /etc/profile
Medium Severity
To ensure the default umask controlled by
/etc/profile
is set properly, add or correct the
umask
setting in
/etc/profile
to read as follows:
umask
Note that
/etc/profile
also reads scrips within
/etc/profile.d
directory. These scripts are also valid files to set umask value. Therefore, they should also be considered during the check and properly remediated, if necessary.