Set the Global UMASK Setting for UsersID: oval:org.secpod.oval:def:67522 | Date: (C)2020-12-03 (M)2023-07-04 |
Class: COMPLIANCE | Family: macos |
The default global umask setting must be set to '027' for user applications. The setting '027' ensures that user created files and directories will be readable, but not writable, by users that share the same group id. Users with a different group id will not be able to read or write those files. This mitigates the risk that unauthorized users might be able to read and write files saved to the system by user applications.
Platform: |
Apple Mac OS X 10.15 |