>From 06cb74271005a064e88c01e0dbac6bdf87e3a976 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 28 Sep 2012 00:35:01 -0400 Subject: [PATCH 5/8] Signed off on user_umask_profile - Updated OCIL conditional check to reflect failure if OCIL check returns no output - Signed off on user_umask_profile --- RHEL6/input/system/accounts/session.xml | 12 +++++------- 1 files changed, 5 insertions(+), 7 deletions(-) diff --git a/RHEL6/input/system/accounts/session.xml b/RHEL6/input/system/accounts/session.xml index 6ca238b..fbb5e8d 100644 --- a/RHEL6/input/system/accounts/session.xml +++ b/RHEL6/input/system/accounts/session.xml @@ -255,7 +255,7 @@ umask 077 -Ensure the Default Umask is Set Correctly in /etc/profile +Ensure the Default umask is Set Correctly in /etc/profile To ensure the default umask controlled by /etc/profile is set properly, add or correct the umask setting in /etc/profile to read as follows: @@ -265,7 +265,7 @@ add or correct the umask setting in /etc/profile to read as fo A misconfigured umask value could result in files with excessive permissions that can be read and/or written to by unauthorized users. - + Verify the umask setting is configured correctly in the /etc/profile file by running the following command:
# grep "umask" /etc/profile
@@ -274,12 +274,12 @@ All output must show the value of umask set to 077, as shown in the bel umask 077
+
- -Ensure the Default Umask is Set Correctly in login.defs +Ensure the Default umask is Set Correctly in login.defs To ensure the default umask controlled by /etc/login.defs is set properly, add or correct the umask setting in /etc/login.defs to read as follows: @@ -299,10 +299,8 @@ umask 077 - + - - -- 1.7.1