← Back to Solaris 11 X86 Security Technical Implementation Guide

V-216186

CAT III (Low)

Users must have a valid home directory assignment.

Rule ID

SV-216186r959010_rule

STIG

Solaris 11 X86 Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-000366

Discussion

All users must be assigned a home directory in the passwd file. Failure to have a home directory may result in the user being put in the root directory.

Check Content

The root role is required.

Determine if each user has a valid home directory.

# logins -xo | while read line; do
     user=`echo ${line} | awk -F: '{ print $1 }'`
     home=`echo ${line} | awk -F: '{ print $6 }'`
     if [ -z "${home}" ]; then
        echo ${user}
     fi
done

If output is produced, this is a finding.

Fix Text

The root role is required.

Correct or justify any items discovered in the check step. Determine if there exists any users who are in passwd but do not have a home directory, and work with those users to determine the best course of action in accordance with site policy.  This generally means deleting the user or creating a valid home directory.