Detections
Analytics
RHEL-10-600470 - RHEL 10 must have a unique group ID (GID) for each group in "/etc/group".
Information
To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.Solution
Configure RHEL 10 to contain no duplicate GIDs for interactive users.Edit the file "/etc/group", and provide each group that has a duplicate GID with a unique GID.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-281202r1166558_rule, STIG-ID|RHEL-10-600470, Vuln-ID|V-281202
Plugin: Unix
Control ID: ae732c3e4f75cfa719db59bee927daa2701588021869e674e8bd31b5a7a1edae