UCF STIG Viewer Logo

All interactive users' home directories must be owned by their respective users.


Overview

Finding ID Version Rule ID IA Controls Severity
V-902 GEN001500 SV-902r2_rule ECLP-1 Medium
Description
If users do not own their home directories, unauthorized users could access user files.
STIG Date
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2018-09-18

Details

Check Text ( C-8018r2_chk )
Check the ownership of each user's home directory listed in the /etc/passwd file.

Procedure:
# ls -lLd

If any user's home directory is not owned by the assigned user, this is a finding.
Fix Text (F-1056r2_fix)
Change the owner of a user's home directory to its assigned user.

Procedure:
# chown