umask not honored as set by STIG

Solution Verified - Updated -

Issue

The DISA STIG has a finding that says any files/directories in user home directories should have permissions of 750 or less permissive. So we set the umask to 077 in /etc/profile, /etc/bashrc, and /etc/login.defs. Then we create a new user and the first time that user logs in a bunch of new directories get created in their home directory such as Desktop, Downloads, etc. These directories have permissions of 755 though, which is a problem.

Environment

  • Red Hat Enterprise Linux 7.3
  • DISA STIG

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content