> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Checking Library and System Folders for World Writable Files

> Enable the world-writable files parameter in Iru Endpoint to audit Library and System folders on Mac. Detect insecure file permissions automatically.

<Callout icon="apple" color="#B84A7A" iconType="regular">This guide applies to Mac computers</Callout>

### About the World Writable Files Parameter

The "Checking Library and System Folders for World Writable Files" parameter is a Blueprint parameter in Iru Endpoint that audits Mac computers for files with overly permissive permissions. This parameter helps identify and remediate security vulnerabilities caused by world writable files.

### How It Works

This parameter scans Library and System folders for world writable files and can attempt to remediate them if found, helping maintain system security by identifying files with overly permissive permissions.

### What are World Writable Files?

World writable files in macOS are files or directories that any user on the system can modify. While this might seem convenient, it poses significant security risks. Any user, including those with malicious intent, can alter these files, potentially leading to unauthorized changes, data corruption, or even system compromise.

Being aware of these files is crucial because they can be exploited to inject malicious code or disrupt services. Regularly auditing and managing file permissions helps maintain system integrity and security. Ensuring that world writable permissions are minimized or eliminated is a fundamental step in protecting your Mac computers from potential vulnerabilities.

### Auditing for and Remediating World Writable Files in the Library Folder

A Parameter can be configured on a Blueprint (Assignment Map) to audit for world writable files located in the Library folder and attempt to remediate them if found. To configure the Parameter:

<Steps>
  <Step title="Access Parameters">
    Open your Blueprint, then click **Parameters**.
  </Step>

  <Step title="Edit Parameters">
    Select **Edit Parameters**. If this is the first Parameter you're adding, select **Add Parameters**.
  </Step>

  <Step title="Search for Parameter">
    In the search field, enter "world writable".
  </Step>

  <Step title="Enable Parameter">
    Locate the **Check Library folder for world writable files** Parameter, and enable it by toggling the switch.
  </Step>

  <Step title="Configure Exclusions">
    Optionally, configure directory exclusions where needed.
  </Step>

  <Step title="Save Configuration">
    Click **Save**.
  </Step>
</Steps>

### Auditing for World Writable Files in the System Folder

<Note>
  Because of Apple's [System Integrity Protection (SIP)](https://support.apple.com/en-us/102149), world writable files found in the System folder cannot be remediated automatically. Manual intervention is required to resolve alerts for world writable files found in this location.
</Note>

A Parameter can be configured on a Blueprint (Assignment Map) to audit for world writable files located in the System folder and alert admins to their presence. To configure the Parameter:

<Steps>
  <Step title="Access Parameters">
    Open your Blueprint, then click **Parameters**.
  </Step>

  <Step title="Edit Parameters">
    Select **Edit Parameters**. If this is the first Parameter you're adding, select **Add Parameters**.
  </Step>

  <Step title="Search for Parameter">
    In the search field, enter "world writable".
  </Step>

  <Step title="Enable Parameter">
    Locate the **Check System folder for world writable files Parameter**, and enable it by toggling the switch.
  </Step>

  <Step title="Configure Mute Option">
    Optionally, mute the Parameter if you want to receive alerts quietly.
  </Step>

  <Step title="Save Configuration">
    Click **Save**.
  </Step>
</Steps>