Detections
Analytics
GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.
Information
If a user has a home directory defined that does not exist, the user may be given the / directory, by default, as the current working directory upon logon. This could create a Denial of Service because the user would not be able to perform useful tasks in this location.Solution
If a user has no home directory, determine why. If possible, delete accounts with no home directory. If the account is valid, then create the home directory using the appropriate system administration utility or manually create, i.e., mkdir <directory name>; copy the skeleton files into the directory; chown <user name> <directory name> for the new directory and the skeleton files. Document all changes.See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, CAT|III, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-27194r1_rule, STIG-ID|GEN001460, Vuln-ID|V-900
Plugin: Unix
Control ID: 131cac10c399c283cb8b8f3e4b7da9a052812333e2d1122923ac7ff2117b3d49