Forum Discussion
Secure Score - Secure Home Folders in macOS
I've performed the recommended manual remediation action (sudo chmod -R og-rw /Users/) on my Macs but Secure Score doesn't recognize it. I have noticed this occurring for a few item. We have also r...
I finally got it working. The issue is stupidity on Microsoft's part in their testing of the home folders. Apparently, their Department of Infinite Wisdom feels that the "Shared" folder should be locked down as well! The CIS benchmark specifically excludes the "Shared" folder because...you know....it's SUPPOSED to be available to all users! I first tested by manually setting the permissions for shared on my own Mac and waited until the next day to see if it was reflected. Sure enough, it is. In my case, I had to leave "execute" permissions available on "Shared" due to the software for my docking station having its config file stored there. It appears the Secure Score test finds that acceptable.
Wow, that sounds insane! Thank you for going through all that, I'm in the same boat here. Tbh, I don't know how viable this is in a school setting like mine, however I have been trying my hand at this and seem to be getting an issue with "shared folders", especially cloud-synced folders. I might just accept the risk on this one and move on, not really worth the time.