Detections
Analytics

1.260 ALMA-09-033130

Information

All AlmaLinux OS 9 interactive users must have a primary group that exists.

GROUP ID: V-269366
RULE ID: SV-269366r1050249

If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.

Solution

Configure the system so that all GIDs referenced in "/etc/passwd" are defined in "/etc/group".

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CCI|CCI-000764, Rule-ID|SV-269366r1050249_rule, STIG-ID|ALMA-09-033130, Vuln-ID|V-269366

Plugin: Unix

Control ID: c8b15ddfa61a56ee316f5cb5f491a3941e0802f95b404154ab40f74357d88d9f