The default umask for system and users must be 077.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-48061 | SOL-11.1-040250 | SV-60933r2_rule | Medium |
| Description |
|---|
| Setting a very secure default value for umask ensures that users make a conscious choice about their file permissions. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2017-01-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-51667r2_fix) |
|---|
| The root role is required. Edit local and global initialization files containing "umask" and change them to use 077. # pfedit /etc/default/login Insert the line UMASK=077 # pfedit [user initialization file] Insert the line umask 077 |