Nutanix AOS must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

An XCCDF Rule

Description

Setting the most restrictive default permissions ensures that when new accounts are created they do not have unnecessary access.

ID: SV-254195r846673_rule
Version: NUTX-OS-001080
Severity: Low
References: CCI-000366
Updated: 23 days ago

Remediation Templates

Configure Nutanix AOS default permissions UMASK to 077 by running the following command.

salt-call state.sls security/CVM/shellCVM