The macOS system must be configured with the sticky bit set on all public directories.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The macOS system must be configured with the sticky bit set on all public directories.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-81687	AOSX-13-001120	SV-96401r1_rule		Medium

Description
The sticky bit must be set on all public directories, as it prevents users with write access to the directory from deleting or renaming files that belong to other users inside it.

STIG	Date
Apple OS X 10.13 Security Technical Implementation Guide	2019-07-01

Details

Check Text ( C-81467r1_chk )
Run the following command to view all world-writable directories that do not have the "sticky bit" set: /usr/bin/sudo /usr/bin/find / -type d \( -perm -0002 -a ! -perm -1000 \) If anything is returned, this is a finding.

Fix Text (F-88535r1_fix)
Run the following command to set the "sticky bit" on all world-writable directories: /usr/bin/sudo /usr/bin/find / -type d \( -perm -0002 -a ! -perm -1000 \) -exec chmod +t {} \;