Detections
Analytics

1.243 RHEL-10-600150

Information

RHEL 10 must assign a primary group to all interactive users.

GROUP ID: V-281174RULE ID: SV-281174r1166474

If a user is assigned the group identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.

Solution

Configure RHEL 10 so that all GIDs referenced in "/etc/passwd" are defined in "/etc/group".

Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-281174r1166474_rule, STIG-ID|RHEL-10-600150, Vuln-ID|V-281174

Plugin: Unix

Control ID: 60f6085a01caecdcb016a71cf61a1c9eb97a1333669f98febacdbcf6e920cea5