← Back to SUSE Linux Enterprise Server 15 Security Technical Implementation Guide

V-234880

CAT II (Medium)

All SUSE operating system local interactive user accounts, upon creation, must be assigned a home directory.

Rule ID

SV-234880r991589_rule

STIG

SUSE Linux Enterprise Server 15 Security Technical Implementation Guide

Version

V2R7

CCIs

None

Discussion

If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.

Check Content

Verify all SUSE operating system local interactive users on the system are assigned a home directory upon creation.

Check to see if the system is configured to create home directories for local interactive users with the following command:

> grep -i create_home /etc/login.defs
CREATE_HOME yes

If the value for "CREATE_HOME" parameter is not set to "yes", the line is missing, or the line is commented out, this is a finding.

Fix Text

Configure the SUSE operating system to assign home directories to all new local interactive users by setting the "CREATE_HOME" parameter in "/etc/login.defs" to "yes" as follows.

CREATE_HOME yes