Cron programs must not set the umask to a value less restrictive than 077.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4360	GEN003220	SV-4360r2_rule	ECCD-1 ECCD-2	Low

Description
The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to a mode of 700 or less permissive. Although umask is often represented as a 4-digit octal number, the first digit representing special access modes is typically ignored or required to be 0.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-8222r2_chk )
Check programs run from cron for umask settings. If any specify a umask more permissive than 077, this is a finding.

Fix Text (F-4271r2_fix)
Edit cron script files and modify the umask to 077.