Extended ACL is applied or not for /private/var/at/cron.deny file
The /private/var/at/cron.deny file should not have an extended ACL.
[enable/disable]
/private/var/at/cron.deny set via chmod
oval:org.secpod.oval:def:25025
SCAP Repo OVAL Definition
2015-06-12