![]() |
![]() |
Rule Check: Home Directory Files Have No Invalid umask Commands
The Home Directory Files Have No Invalid umask Commands check verifies that the specified startup scripts in the home directory of the specified user (or users) include only appropriate umask
commands.\
If you are adding this check to a configuration policy rule, you specify what umask
values are to be considered invalid. In general, umasks
with low values are less safe because the result of their application is that overly permissive files are created. Also, because a global umask
exists, in most cases it is not appropriate for individual users to override it.
The check examines all matching files in each specified user's home directory. The check fails for an individual user if any matching files contain invalid umask
commands, and it passes for that user if not. The check is indeterminate for any user whose account does not exist, or who has no defined home directory, or whose defined home directory does not actually exist.
If the check fails for a given set of umask
values, the username, home directory path, filename, and actual umask
value are displayed in the scan results.
Note: Files larger than 10KB are ignored, even if they match the file specifications in this check.
Parameters | Description |
---|---|
User(s) |
The list of names to check. Can be a single account name, a comma-delimited list of account names (maximum length = 255 characters), or the keyword ALL (must be capitalized - "all" is treated as a username). The UID cannot be used. Wildcards are not supported. Extra spaces are ignored. All usernames are case-sensitive. Use the NOT operator to specify that all users except the specified ones should be checked. Some valid examples are:
Some examples that will not work:
|
File(s) |
The list of files to check. Can be any valid path to a single file, a comma-delimited list of paths to individual files, a single wildcard file path, or a comma-delimited list of wildcard file paths. All paths are relative to the specified user's home directory and cannot start with a slash. Note: The asterisk ( Some valid examples:
Some examples that will not work:
|
Should have umask |
Specify the desired The values entered in this field are the values that are acceptable for Some valid examples:
Some examples that will not work:
|
Remedial Suggestion (optional) |
Optional suggestion |
Comments
0 comments
Please sign in to leave a comment.