Detections
Analytics

SOL-11.1-070130 - Reserved UIDs 0-99 must only be used by system accounts.

Information

If a user is assigned a UID that is in the reserved range, even if it is not presently in use, security exposures can arise if a subsequently installed application uses the same UID.

Solution

The root role is required.

Correct or justify any items discovered in the Check step. Determine if there are any accounts using these reserved UIDs, and work with their owners to determine the best course of action in accordance with site policy. This may require deleting users or changing UIDs for users.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216429r959010_rule, STIG-ID|SOL-11.1-070130, STIG-Legacy|SV-60949, STIG-Legacy|V-48077, Vuln-ID|V-216429

Plugin: Unix

Control ID: 676438e717360d76cb5cb70126f30c6790257df6987453c7b88e89d995818f69