Extended ACL is applied or not for /private/var/at/cron.deny file The /private/var/at/cron.deny file should not have an extended ACL. [no/yes] /private/var/at/cron.deny set via chmod oval:org.secpod.oval:def:44388 SCAP Repo OVAL Definition 2018-02-21