All AIX interactive users home directories must be group-owned by the home directory owner primary group.
An XCCDF Rule
Description
<VulnDiscussion>If the Group Identifier (GID) of the home directory is not the same as the GID of the user, this would allow unauthorized access to files.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215277r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Change the group owner for users home directories to the primary group of the assigned user:
# chgrp <groupname> <directoryname>
(Replace examples with appropriate group and home directory.)
Document all changes.