GEN005040 - All FTP users must have a default umask of 077.

Information

The umask controls the default access mode assigned to newly created files. An umask of 077 limits new files to mode 700 or less permissive. Although umask is stored as a 4-digit number, the first digit representing special access modes is typically ignored or required to be zero (0).

Solution

Add the arguments -u077 to the ftpd on the /etc/inetd.conf and refresh inetd.
#vi /etc/inetd.conf
#refresh -s inetd

Change the umask of the ftp user.
#chuser umask=077 ftp

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-12011, Rule-ID|SV-38813r1_rule, STIG-ID|GEN005040, Vuln-ID|V-12011

Plugin: Unix

Control ID: c455bd4377ffbf56654adaa72bcdbf2c7421ffb2bca9ff95eab3da919d75efe6