UIDs reserved for system accounts must not be assigned to non-system accounts on AIX systems.
An XCCDF Rule
Description
<VulnDiscussion>Reserved UIDs are typically used by system software packages. If non-system accounts have UIDs in this range, they may conflict with system software, possibly leading to the user having permissions to modify system files.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215195r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Using the "usermod" command, change the UID numbers for non-system accounts with reserved UIDs (those less or equal to 128):
# usermod -u <uid> [user_name]