Extended ACL is applied or not for /private/var/at/cron.deny file The /private/var/at/cron.deny file should not have an extended ACL. [enable/disable] /private/var/at/cron.deny set via chmod oval:org.secpod.oval:def:25025 SCAP Repo OVAL Definition 2015-06-12