BaselineWatch
Desk

RHEL-09-411060 All RHEL 9 local interactive users must have a home directory assigned in the /etc/passwd file.

DISA STIG library V2R10
All changes in this version
first version loaded CAT II

Maps to CM-6 via CCI-000366

Title

All RHEL 9 local interactive users must have a home directory assigned in the /etc/passwd file.

Control

Verify that interactive users on the system have a home directory assigned with the following command: $ sudo awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $3, $6}' /etc/passwd smithk:x:1000:1000:smithk:/home/smithk:/bin/bash scsaustin:x:1001:1001:scsaustin:/home/scsaustin:/bin/bash djohnson:x:1002:1002:djohnson:/home/djohnson:/bin/bash Inspect the output and verify that all interactive users (normally users with a user identifier (UID) greater that 1000) have a home directory defined. If users home directory is not defined, this is a finding.

Discussion

If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.

Related controls

CCI-000366

Fix

Create and assign home directories to all local interactive users on RHEL 9 that currently do not have a home directory assigned.