SV-282760r1201260_rule
V-282760
SRG-OS-000480-GPOS-00230
TOSS-05-000493
CAT II
10
Change the mode of interactive user's home directories to "0770." using the following command:
Note: The example will be for the user "smithj."
$ sudo chmod 0770 /home/smithj
Verify TOSS 5 limits the ability of nonprivileged users to grant other users direct access to the contents of their home directories/folders.
Ensure the user permissions on all user home directories is set to 770 permissions using the following command:
$ find $(awk -F: '($3>=1000)&&($7 !~ /nologin/){print $6}' /etc/passwd) -maxdepth 0 -not -perm 770 -ls 2> /dev/null
If there is any output, this is a finding.
V-282760
False
TOSS-05-000493
Verify TOSS 5 limits the ability of nonprivileged users to grant other users direct access to the contents of their home directories/folders.
Ensure the user permissions on all user home directories is set to 770 permissions using the following command:
$ find $(awk -F: '($3>=1000)&&($7 !~ /nologin/){print $6}' /etc/passwd) -maxdepth 0 -not -perm 770 -ls 2> /dev/null
If there is any output, this is a finding.
M
5738