Title

Users must have a valid home directory assignment. (Cat III impact)

Discussion

All users must be assigned a home directory in the passwd file. Failure to have a home directory may result in the user being put in the root directory.

Check Content

The root role is required. Determine if each user has a valid home directory. # logins -xo | while read line; do user=`echo ${line} | awk -F: '{ print $1 }'` home=`echo ${line} | awk -F: '{ print $6 }'` if [ -z "${home}" ]; then echo ${user} fi done If output is produced, this is a finding.

Fix Text

The root role is required. Correct or justify any items discovered in the check step. Determine if there exists any users who are in passwd but do not have a home directory, and work with those users to determine the best course of action in accordance with site policy. This generally means deleting the user or creating a valid home directory.

Additional Identifiers

Rule ID: SV-216186r603268_rule

Vulnerability ID: V-216186

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.