All interactive users' home directories must be group-owned by the home directory owner's primary group.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-903	GEN001520	SV-903r2_rule	ECLP-1	Medium

Description
If the GID of the home directory is not the same as the GID of the user, this would allow unauthorized access to files.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-8019r3_chk )
Check the group ownership for each user in the /etc/passwd file. Procedure: # ls -lLd If any user's home directory is not group-owned by the assigned user's primary group, this is a finding. Home directories for application accounts requiring different group ownership must be documented using site-defined procedures.

Fix Text (F-1057r3_fix)
Change the group owner for user's home directories to the primary group of the assigned user. Procedure: # chgrp groupname directoryname (Replace examples with appropriate group and home directory.) Document all changes.