UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

All interactive users' home directories must be owned by their respective users.


Overview

Finding ID Version Rule ID IA Controls Severity
V-902 GEN001500 SV-902r2_rule ECLP-1 Medium
Description
If users do not own their home directories, unauthorized users could access user files.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-8018r2_chk )
Check the ownership of each user's home directory listed in the /etc/passwd file.

Procedure:
# ls -lLd

If any user's home directory is not owned by the assigned user, this is a finding.
Fix Text (F-1056r2_fix)
Change the owner of a user's home directory to its assigned user.

Procedure:
# chown