UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

All interactive user's home directories must be owned by their respective users.


Overview

Finding ID Version Rule ID IA Controls Severity
V-902 GEN001500 SV-39822r1_rule ECLP-1 Medium
Description
If users do not own their home directories, unauthorized users could access user files.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-38697r3_chk )
Check the ownership of each user's home directory listed in the /etc/passwd file.

Procedure:
# cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld | more

If any user's home directory is not owned by the assigned user, this is a finding.
Fix Text (F-1056r2_fix)
Change the owner of a user's home directory to its assigned user.

Procedure:
# chown