UCF STIG Viewer Logo

All interactive user home directories must be owned by their respective users.


Overview

Finding ID Version Rule ID IA Controls Severity
V-902 GEN001500 SV-64589r1_rule Medium
Description
If users do not own their home directories, unauthorized users could access user files.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-53005r1_chk )
Check the ownership of each user home directory listed in the /etc/passwd file.

Procedure:
# cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld

If any user home directory is not owned by the assigned user, this is a finding.
Fix Text (F-55185r2_fix)
Change the owner of a user's home directory to its assigned user.

Procedure:
# chown