>From 1e676992869fb84d61f94c05fdb9423f9254496d Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 19 Sep 2012 11:43:04 -0400 Subject: [PATCH 03/14] Created OCIL for user_umask_bashrc Created OCIL text for user_umask_bashrc --- RHEL6/input/system/accounts/session.xml | 14 ++++++++++++-- 1 files changed, 12 insertions(+), 2 deletions(-) diff --git a/RHEL6/input/system/accounts/session.xml b/RHEL6/input/system/accounts/session.xml index 26e33b6..a038a8f 100644 --- a/RHEL6/input/system/accounts/session.xml +++ b/RHEL6/input/system/accounts/session.xml @@ -191,15 +191,25 @@ operator="equals" interactive="0"> Ensure the Default Bash Umask is Set Correctly To ensure the default umask for users of the Bash shell is set properly, -add or correct in /etc/bashrc the line: +add or correct the umask setting in /etc/bashrc to read +as follows:
umask 077
The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and/or written to by unauthorized users. +Verify the umask setting is configured correctly in the /etc/bashrc file by +running the following command: +
# grep "umask" /etc/bashrc
+All output must show the value of umask set to 077, as shown below: +
# grep "umask" /etc/bashrc
+umask 077
+umask 077
+
+ - + -- 1.7.1