UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The sticky bit must be set on all public directories.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51285 OSX8-00-01120 SV-65495r2_rule Medium
Description
The sticky bit must be set on all public directories.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53633r2_chk )
Run the following command to view all world-writable directories that do not have the sticky bit set:

sudo find / -type d \( -perm -0002 -a ! -perm -1000 \)

If anything is returned, this is a finding.
Fix Text (F-56085r1_fix)
Run the following command to set the sticky bit on all world-writable directories:

sudo find / -type d \( -perm -0002 -a ! -perm -1000 \) -exec chmod +t {} \;