All interactive user's home directories must be owned by their respective users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-902	GEN001500	SV-39822r1_rule	ECLP-1	Medium

Description
If users do not own their home directories, unauthorized users could access user files.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-38697r3_chk )
Check the ownership of each user's home directory listed in the /etc/passwd file. Procedure: # cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld | more If any user's home directory is not owned by the assigned user, this is a finding.

Fix Text (F-1056r2_fix)
Change the owner of a user's home directory to its assigned user. Procedure: # chown