We have been working on deploying the latest Center for Internet Security Controls for MacOS (CIS Apple OSX 10.12 Benchmark version 1.0.0). We have found that Adobe apps are using the world writeable privilege. That security issue is addressed in CIS
5.1.1 Secure Home Folders
5.1.4 Check Library folder for world writable files
We have to write specific punch outs on the policy just for Adobe. None of the other applications rely on the world writeable permission in order to operate. Has anybody else run into this? More importantly has anybody else been able to fix it so that 5.1.1 and 5.1.4 are in full compliance?
AdChoices