UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

All interactive user home directories must be owned by their respective users.


Overview

Finding ID Version Rule ID IA Controls Severity
V-902 GEN001500 SV-45030r1_rule Medium
Description
If users do not own their home directories, unauthorized users could access user files.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-42416r1_chk )
Check the ownership of each user home directory listed in the /etc/passwd file.

Procedure:
# cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld

If any user home directory is not owned by the assigned user, this is a finding.
Fix Text (F-38444r1_fix)
Change the owner of a user's home directory to its assigned user.

Procedure:
# chown