Extended ACL is applied or not for /private/var/at/cron.deny file
The /private/var/at/cron.deny file should not have an extended ACL.
[no/yes]
/private/var/at/cron.deny set via chmod
oval:org.secpod.oval:def:44388
SCAP Repo OVAL Definition
2018-02-21