AIX7-00-002087 - All files and directories contained in users home directories on AIX must be group-owned by a group in which the home directory owner is a member.

Information

If the Group Identifier (GID) of the home directory is not the same as the GID of the user, this would allow unauthorized access to files.

Solution

Change the group of a file not group-owned by a group where the home directory's owner is a member using command:
# chgrp [user's primary group] [file with bad group ownership]

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215278r991592_rule, STIG-ID|AIX7-00-002087, STIG-Legacy|SV-101867, STIG-Legacy|V-91769, Vuln-ID|V-215278

Plugin: Unix

Control ID: 9f9c8a01d50ea4f02b711dd2775c3386e402e3a21d299b5372012c83112c83db