Skip to content

Create a new EXO policy to check for users with Default or Anonymous mailbox folder permissions #2544

Open

Description

@tkol2022

Prerequisites

  • This issue has an informative and human-readable title.
  • Assignee should meet with issue author before starting work.

💡 Summary

This issue is to code per-user configuration checks for default / anonymous permissions based on the investigation performed in #1420.

Implementation of this issue depends on the completion of #2543 (per user mailbox policy checks feature) and might make sense to develop them together.

Motivation and context

Default and anonymous mailbox folder permissions represent a grave risk and therefore it makes sense for ScubaGear to scan for these.

Implementation notes

  • Implement the checks and ask for review from CISA to answer any questions.

Acceptance criteria

  • Developer has completed the testing and actions noted above.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementThis issue or pull request will add new or improve existing functionality

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions