Skip to content

Ensure the Default Umask is Set Correctly in login.defs

An XCCDF Rule

Description

To ensure the default umask controlled by /etc/login.defs is set properly, add or correct the UMASK setting in /etc/login.defs to read as follows:

UMASK 

Rationale

The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and written to by unauthorized users.

ID
xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs
Severity
Medium
References
Updated