SV-252969r1190845: All TOSS local interactive user home directories must have mode 0750 or less permissive. | Tri-Lab Operating System Stack (TOSS) 4 STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

All TOSS local interactive user home directories must have mode 0750 or less permissive.

Description

Discussion Text

Users' home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366

References

DPMS Target TOSS 4 DISA DPMS Target TOSS 4 5469

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# oval:mil.disa.stig.toss4os:def:252969
check=$(stat -c "%A %a %F" /home/* 2>/dev/null | grep -E '^d.* 0750.*dir$' || true)
if [ -z "$check" ]; then echo "FAIL"; exit 1; else echo "PASS"; exit 0; fi

Remediation

Change the mode of interactive user's home directories to "0750" using the following command:

Note: The example will be for the user "disauser".

$ sudo chmod 0750 /home/disauser