All interactive user home directories must be owned by their respective users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-902	GEN001500	SV-45030r1_rule		Medium

Description
If users do not own their home directories, unauthorized users could access user files.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-42416r1_chk )
Check the ownership of each user home directory listed in the /etc/passwd file. Procedure: # cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld If any user home directory is not owned by the assigned user, this is a finding.

Fix Text (F-38444r1_fix)
Change the owner of a user's home directory to its assigned user. Procedure: # chown