content 5.5.5 Ensure default user umask is 027 or more restrictive (Scored)

5.5.5 Ensure default user umask is 027 or more restrictive (Scored)

Open shawndwells opened this issue 5 years ago • 4 comments

Already have many rules on this. Just need to map them all.

Mar 29 '20 04:03 shawndwells

Hi, Is it possible to add this rule for Ubuntu 1804 as well?

May 08 '20 06:05 willumpie

@willumpie if is in the CIS profile for Ubuntu, I don't see why not.

May 08 '20 15:05 redhatrises

Fine, in the Ubuntu1804 CIS standard, it is rule 5.4.4. (page 341 in CIS Ubuntu Linux 18.04 LTS Benchmark v1.0.0 - 08-13-2018

May 11 '20 07:05 willumpie

Following rules cover /etc/bashrc and /etc/profile. - accounts_umask_etc_bashrc - accounts_umask_etc_profile

But /etc/profile.d/*.sh is not covered.

May 19 '20 21:05 yuumasato