UCF STIG Viewer Logo

System files and directories must not have uneven access permissions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-784 GEN001140 M6 SV-37853r1_rule ECCD-1 ECCD-2 Medium
Description
Discretionary access control is undermined if users, other than a file owner, have greater access permissions to system files and directories than the owner.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft 2013-01-10

Details

Check Text ( C-37050r1_chk )
Open a terminal session and use the following command to verify the system directories do not have uneven file permissions.

ls -lL /etc /bin /usr/bin /sbin /usr/sbin

If any directories listed contain uneven file permissions, this is a finding.

Fix Text (F-32315r1_fix)
Use the "chmod" command to set the mode of files with uneven permissions so the owners do not have less permission than group or world users.