V-788

CAT II (Medium)

All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive.

Rule ID

SV-45113r1_rule

STIG

Version

V1R12

CCIs

If the skeleton files are not protected, unauthorized personnel could change user startup parameters and possibly jeopardize user files.

Check skeleton files permissions.
# ls -alL /etc/skel
If a skeleton file has a mode more permissive than 0644, this is a finding.

Change the mode of skeleton files with incorrect mode:
# chmod 0644 <skeleton file>