STIGQter STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

All AlmaLinux OS 9 local initialization files must have mode 0740 or less permissive.

DISA Rule

SV-269276r1050158_rule

Vulnerability Number

V-269276

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ALMA-09-022130

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Set the mode of the local initialization files to "0740" with the following command:

Note: The example will be for the "testuser" account, who has a home directory of "/home/testuser".

$ chmod 0740 /home/testuser/.<INIT_FILE>

Check Contents

Verify that all local initialization files have a mode of "0740" or less permissive with the following command:

Note: The example will be for the "testuser" account, who has a home directory of "/home/testuser".

$ find /home/testuser/.[^.]* -maxdepth 0 -perm -740 -exec stat -c "%a %n" {} \; | more

755 /home/testuser/.cache
755 /home/testuser/.mozilla

If any local initialization files have a mode more permissive than "0740", this is a finding.

Vulnerability Number

V-269276

Documentable

False

Rule Version

ALMA-09-022130

Severity Override Guidance

Verify that all local initialization files have a mode of "0740" or less permissive with the following command:

Note: The example will be for the "testuser" account, who has a home directory of "/home/testuser".

$ find /home/testuser/.[^.]* -maxdepth 0 -perm -740 -exec stat -c "%a %n" {} \; | more

755 /home/testuser/.cache
755 /home/testuser/.mozilla

If any local initialization files have a mode more permissive than "0740", this is a finding.

Check Content Reference

M

Target Key

5664