>From 7fe9f83a42f813acf0fb40a0e9804062257568fd Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 19 Sep 2012 11:57:02 -0400 Subject: [PATCH 06/14] Created OCIL for user_umask_logindefs - Updated description text for clarify/copy editing - Created OCIL for user_umask_logindefs --- RHEL6/input/system/accounts/session.xml | 12 ++++++++++-- 1 files changed, 10 insertions(+), 2 deletions(-) diff --git a/RHEL6/input/system/accounts/session.xml b/RHEL6/input/system/accounts/session.xml index 9062ad5..c85f446 100644 --- a/RHEL6/input/system/accounts/session.xml +++ b/RHEL6/input/system/accounts/session.xml @@ -262,12 +262,20 @@ umask 077 Ensure the Default Umask is Set Correctly in login.defs To ensure the default umask controlled by /etc/login.defs is set properly, -add or correct the line: -
UMASK 077
+add or correct the umask setting in /etc/login.defs to read as follows: +
umask 077
The umask value influences the permissions assigned to files when they are created. A misconfigured umask value could result in files with excessive permissions that can be read and/or written to by unauthorized users. +Verify the umask setting is configured correctly in the /etc/login.defs file by +running the following command: +
# grep "umask" /etc/login.defs
+All output must show the value of umask set to 077, as shown in the below: +
# grep "umask" /etc/login.defs
+umask 077
+
+ -- 1.7.1