UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Photon operating system must set the "umask" parameter correctly.


Overview

Finding ID Version Rule ID IA Controls Severity
V-256583 PHTN-30-000114 SV-256583r887423_rule Medium
Description
The "umask" value influences the permissions assigned to files when they are created. The "umask" setting in "login.defs" controls the permissions for a new user's home directory. By setting the proper "umask", home directories will only allow the new user to read and write files there.
STIG Date
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide 2023-02-21

Details

Check Text ( C-60258r887421_chk )
At the command line, run the following command:

# grep UMASK /etc/login.defs

Expected result:

UMASK 077

If the output does not match the expected result, this a finding.
Fix Text (F-60201r887422_fix)
Navigate to and open:

/etc/login.defs

Ensure the "UMASK" line is uncommented and set to the following:

UMASK 077