Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
All files and directories contained in user home directories must not have extended ACLs.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22352 | GEN001570 M6 | SV-38095r1_rule | ECLP-1 | Medium |
| Description |
|---|
| Excessive permissions allow unauthorized access to user files. |
| STIG | Date |
|---|---|
| MAC OSX 10.6 Workstation Security Technical Implementation Guide | 2013-04-09 |
Details
| Check Text ( C-37634r1_chk ) |
|---|
| Open a terminal session and enter the following command. find /Users -print -exec ls -lLd \{\} \; | grep '^..........+' If files are shown with permissions that include a '+', the file has an extended ACL. If the file has an extended ACL and it has not been documented with the IAO, this is a finding. |
| Fix Text (F-32875r1_fix) |
|---|
| Open a terminal session and enter the following command to remove the extended ACLs. chmod -N |