BaselineWatch
Desk

RHEL-10-600120 RHEL 10 must assign a home directory for local interactive user accounts upon creation.

DISA STIG library V1R3
All changes in this version
first version loaded CAT II

Maps to SI-16 via CCI-002824

Title

RHEL 10 must assign a home directory for local interactive user accounts upon creation.

Control

Verify RHEL 10 assigns a home directory for local interactive user accounts upon creation with the following command: $ sudo grep -i create_home /etc/login.defs CREATE_HOME yes If the value for "CREATE_HOME" parameter is not set to "yes", the line is missing, or the line is commented out, this is a finding.

Discussion

If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.

Related controls

CCI-002824

Fix

Configure RHEL 10 to assign home directories to all new local interactive users by setting the "CREATE_HOME" parameter in "/etc/login.defs" to "yes" as follows: CREATE_HOME yes