Detections
Analytics
RHEL-10-600150 - RHEL 10 must assign a primary group to all interactive users.
Information
If a user is assigned the group identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.Solution
Configure RHEL 10 so that all GIDs referenced in "/etc/passwd" are defined in "/etc/group".Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-281174r1166474_rule, STIG-ID|RHEL-10-600150, Vuln-ID|V-281174
Plugin: Unix
Control ID: b803fe898ac4420832ef712d04d10fcbc1f9317e022f6865ee4c619ced9b1690