umask not honored as set by STIG
Issue
The DISA STIG has a finding that says any files/directories in user home directories should have permissions of 750 or less permissive. So we set the umask to 077 in /etc/profile, /etc/bashrc, and /etc/login.defs. Then we create a new user and the first time that user logs in a bunch of new directories get created in their home directory such as Desktop, Downloads, etc. These directories have permissions of 755 though, which is a problem.
Environment
- Red Hat Enterprise Linux 7.3
- DISA STIG
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.