System files and directories must not have uneven access permissions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-784	GEN001140 M6	SV-37853r1_rule	ECCD-1 ECCD-2	Medium

Description
Discretionary access control is undermined if users, other than a file owner, have greater access permissions to system files and directories than the owner.

STIG	Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide	2012-01-30

Details

Check Text ( C-37050r1_chk )
Open a terminal session and use the following command to verify the system directories do not have uneven file permissions. ls -lL /etc /bin /usr/bin /sbin /usr/sbin If any directories listed contain uneven file permissions, this is a finding.

Fix Text (F-32315r1_fix)
Use the "chmod" command to set the mode of files with uneven permissions so the owners do not have less permission than group or world users.