7.10 Repairing permissions is no longer needed

Information

With the introduction of System Integrity Protection (SIP) Apple has removed the necessity of repairing permissions. In earlier versions of the Operating System repair permissions checked the receipt files of installed software and ensured that the existing permissions in the file system matched what the receipts said it should. System integrity protection manages and blocks permission to certain directories continuously.

http://www.macissues.com/2015/10/02/about-os-x-10-11-el-capitan-and-permissions-fixes/

https://en.wikipedia.org/wiki/System_Integrity_Protection

http://www.infoworld.com/article/2988096/mac-os-x/sorry-unix-fans-os-x-el-capitan-kills-root.html

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

None

See Also

https://workbench.cisecurity.org/files/3092

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(10), CSCv7|13

Plugin: Unix

Control ID: 75ceeeb741491be773daccbfcf421b04fbfafda7a68f5d40c98cf293e83422e4