I have two files that the Azure OMS agent reads/writes from that are world writable files. Our vulnerability scanner (rapid 7) is picking these up as vulnerabilities. It's also poor practice in general.


File permissions are respectively set to:

-rw-rw-rw- 1 omsagent omiusers 
-rw-rw-rw- 1 omsagent omiusers

If I change the permissions to


I am unable to get scan data back from the device. Does anyone know the permissions these files should be set to? Microsoft doesn't seem to have documentation on these permissions in general.

1 Answer 1


It should be -rw-rw-r--. The vulnerability scan is warning you that every other shouldn't write (w) on this file.

  • Ah, good call. I'll try that out and hopefully the OMS agent doesn't freak out again. Thanks
    – shelum
    Feb 28, 2019 at 20:38

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .