← Back to VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide

V-256583

CAT II (Medium)

The Photon operating system must set the "umask" parameter correctly.

Rule ID

SV-256583r991590_rule

STIG

VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide

Version

V1R4

CCIs

CCI-000366

Discussion

The "umask" value influences the permissions assigned to files when they are created. The "umask" setting in "login.defs" controls the permissions for a new user's home directory. By setting the proper "umask", home directories will only allow the new user to read and write files there.

Check Content

At the command line, run the following command:

# grep ^UMASK /etc/login.defs

Example result:

UMASK 077

If "UMASK" is not configured to "077", this a finding.

Note: "UMASK" should only be specified once in login.defs.

Fix Text

Navigate to and open:

/etc/login.defs

Ensure the "UMASK" line is uncommented and set to the following:

UMASK 077