Detections
Analytics

5.4.3.15 Ensure all local interactive users are assigned a home directory upon creation

Information

All local interactive user accounts must be assigned a home directory upon creation.

If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.

Solution

Configure the operating system to assign home directories to all new local interactive users by setting the "CREATE_HOME" parameter in "/etc/login.defs" to "yes" as follows.

CREATE_HOME yes

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, Rule-ID|SV-230324r627750_rule, Vuln-ID|V-230324

Plugin: Unix

Control ID: 5dd33685d45e5edf3a869df5aaa87ae5bd5cf3de479f08507a5c87802eb6184b