STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

"At" jobs must not set the umask to a value less restrictive than 077.

DISA Rule

SV-227775r603266_rule

Vulnerability Number

V-227775

Group Title

SRG-OS-000312

Rule Version

GEN003440

Severity

CAT II

CCI(s)

• CCI-002165 - The information system enforces organization-defined discretionary access control policies over defined subjects and objects.

Weight

10

Fix Recommendation

Edit "at" jobs or referenced scripts to remove umask commands setting umask to a value less restrictive than 077.

Check Contents

Determine what "at" jobs exist on the system.
Procedure:
# ls /var/spool/cron/atjobs

If there are no "at" jobs present, this is not applicable.

Determine if any of the "at" jobs or any scripts referenced execute the umask command. Check for any umask setting more permissive than 077.

# grep umask <at job or referenced script>

If any "at" job or referenced script sets umask to a value more permissive than 077, this is a finding.

Vulnerability Number

V-227775

Documentable

False

Rule Version

GEN003440

Severity Override Guidance

Determine what "at" jobs exist on the system.
Procedure:
# ls /var/spool/cron/atjobs

If there are no "at" jobs present, this is not applicable.

Determine if any of the "at" jobs or any scripts referenced execute the umask command. Check for any umask setting more permissive than 077.

# grep umask <at job or referenced script>

If any "at" job or referenced script sets umask to a value more permissive than 077, this is a finding.

Check Content Reference

M

Target Key

4061

Comments