Macintosh OS X Workstation STIG, V1R1 

DISA Field Security Operations 

15 June 2004 

          Developed by DISA for the DOD 

APPENDIX B.  File and Directory Permissions Table 

FILE and DIRECTORY 

PERMISSION 

OWNER GROUP 

EXIST 

FORBIDDEN 

/bin/csh 755 

privileged 

privileged 

n 

n 

/bin/sh 755 

privileged 

privileged 

n 

n 

/dev/kmem 640 

root 

sys 

y 

n 

/dev/mem 640 

root 

sys 

y 

n 

/dev/null 666 

root 

sys 

y 

n 

/etc/ftpusers 640 

root 

root 

y 

n 

/etc/hosts.equiv 600 

root 

root 

n 

n 

/etc/host.lpd 664 

root 

root 

n 

n 

/etc/inetd.conf 440 

root 

root 

y 

n 

/etc/passwd 644 

root 

root 

y 

n 

/tmp 1777 

privileged 

privileged 

n 

n 

/usr/bin/rsh 755 

privileged 

privileged 

n 

n 

/var/mail 1777 

privileged 

privileged 

n 

n 

/var/tmp 1777 

privileged 

privileged 

n 

n 

52

UNCLASSIFIED