All files and directories contained in interactive user home directories must be owned by the home directorys owner.

From Apple OS X 10.8 (Mountain Lion) Workstation STIG

Associated with: CCI-000366

SV-65457r1_rule All files and directories contained in interactive user home directories must be owned by the home directorys owner.

Vulnerability discussion

All files and directories contained in interactive user home directories must be owned by the home directory's owner.

Check content

To list all of the accounts on the system and their defined home directories, run the following command: sudo dscl . -list /users NFSHomeDirectory For all non-system users, validate the ownership of each user's home directory by running the following command: sudo ls -ld [home directory] If the folder is not owned by the user, this is a finding.

Fix text

To change the ownership of the files and directories to the owner of the home directory, run the following command: sudo chown -R username /Users/username

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.