AOSX-13-001120 - The macOS system must be configured with the sticky bit set on all public directories.

Information

The sticky bit must be set on all public directories, as it prevents users with write access to the directory from deleting or renaming files that belong to other users inside it.

Solution

Run the following command to set the 'sticky bit' on all world-writable directories:

/usr/bin/sudo /usr/bin/find / -type d ( -perm -0002 -a ! -perm -1000 ) -exec chmod +t {} ;

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-13_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-214904r609363_rule, STIG-ID|AOSX-13-001120, STIG-Legacy|SV-96401, STIG-Legacy|V-81687, Vuln-ID|V-214904

Plugin: Unix

Control ID: 573dce8495420e9d38b52c8d83d56d87397e2b05db38384554a40184c1d2904b