UCF STIG Viewer Logo

The "at" directory must have mode 0755 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4364 GEN003400 M6 SV-38019r1_rule ECLP-1 Medium
Description
If the "at" directory has a mode more permissive than 0755, unauthorized users could be allowed to view or to edit files containing sensitive information within the "at" directory. Unauthorized modifications could result in Denial of Service to authorized "at" jobs.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft 2013-01-10

Details

Check Text ( C-37590r1_chk )
Open a terminal session and enter the following command to verify the mode of the "at" directory.

ls -ld /var/at

If the directory mode is more permissive than 0755, this is a finding.
Fix Text (F-32832r1_fix)
Open a terminal session and enter the following command to set the mode of the "at" directory to 755.

chmod 755 /var/at