Title

POSIX access permissions must be assigned based on user categories. (Cat II impact)

Discussion

POSIX access permissions must be assigned based on user categories. Changing permissions on a user's home directory from 750 to 700 will disable Apple file sharing. User's home directory POSIX permissions should be set to 700.

Check Content

Open a terminal session and enter the following command. ls -ld <users home directory> If permissions are not set to 700, this is a finding.

Fix Text

Open a terminal session and enter the following command. sudo chmod 700 <user’s home directory>

Additional Identifiers

Rule ID: SV-37208r1_rule

Vulnerability ID: V-25267

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.