Apple OS X 10.13 Security Technical Implementation Guide

The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

135STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 27 2022

The macOS system must be configured with the sticky bit set on all public directories.

Apple OS X 10.13 Security Technical Implementation Guide

Assessment Title

Rule Text

The macOS system must be configured with the sticky bit set on all public directories.

Description

Discussion Text

The sticky bit must be set on all public directories, as it prevents users with write access to the directory from deleting or renaming files that belong to other users inside it.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214904

Rule

SV-214904r609363_rule

Severity

medium

Rule Version

AOSX-13-001120

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Run the following command to view all world-writable directories that do not have the "sticky bit" set:

/usr/bin/sudo /usr/bin/find / -type d \( -perm -0002 -a ! -perm -1000 \)

If anything is returned, this is a finding.

Implementation Procedure

Fix Text

Run the following command to set the "sticky bit" on all world-writable directories:

/usr/bin/sudo /usr/bin/find / -type d \( -perm -0002 -a ! -perm -1000 \) -exec chmod +t {} \;

STIG check 99 of 135 in the Apple OS X 10.13 STIG checklist

← Previous · V-214903The macOS system must be configured with the finger service disabled.Next · V-214905 →The macOS system must be configured with the prompt for Apple ID and iCloud disabled.