The Red Hat Enterprise Linux operating system must be configured so that all files and directories contained in local interactive user home directories are group-owned by a group of which the home directory owner is a member.
An XCCDF Rule
Description
If a local interactive user's files are group-owned by a group of which the user is not a member, unintended users may be able to access them.
- ID
- SV-204472r603261_rule
- Version
- RHEL-07-020670
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Change the group of a local interactive user's files and directories to a group that the interactive user is a member of. To change the group owner of a local interactive user's files and directories, use the following command:
Note: The example will be for the user smithj, who has a home directory of "/home/smithj" and is a member of the users group.
# chgrp users /home/smithj/<file>