Ensure the Default Umask is Set Correctly in login.defs
An XCCDF Rule
Description
To ensure the default umask controlled by /etc/login.defs
is set properly,
add or correct the UMASK
setting in /etc/login.defs
to read as follows:
UMASK
Rationale
The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and written to by unauthorized users.
- ID
- xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs
- Severity
- Medium
- References
- Updated