Ensure the file permissions mask is correct

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

As root run su - yugabyte -c umask. The umask of the yugabyte user must be 0077 or more restrictive; anything less restrictive (e.g. the default 0022) is a finding. Check .bash_profile, .profile and .bashrc of the yugabyte user.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Depending upon the yugabyte user's environment, the umask is typically set in the initialization file .bash_profile, but may also be set in .profile or .bashrc. To set the umask, add the following to the appropriate profile file: # whoami yugabyte # cd ~ # ls -ld .{bash_profile,profile,bashrc} ls: cannot access '.bash_profile': No such file or directory ls: cannot access '.profile': No such file or directory ls: cannot access '.bashrc': No such ...