Red Hat Enterprise Linux 9 Security Technical Implementation Guide

The Red Hat Enterprise Linux 9 Security Technical Implementation Guide (V2 R9) has 445 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

445STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R9

ArchivedPublished Wed Jul 01 2026

All RHEL 9 interactive users must have a primary group that exists.

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Assessment Title

Rule Text

All RHEL 9 interactive users must have a primary group that exists.

Description

Discussion Text

If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-258048

Rule

SV-258048r1069380_rule

Severity

medium

Rule Version

RHEL-09-411045

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that all RHEL 9 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Implementation Procedure

Fix Text

Configure the system so that all GIDs are referenced in "/etc/passwd" are defined in "/etc/group".

Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.

STIG check 262 of 445 in the Red Hat Enterprise Linux 9 STIG checklist

← Previous · V-258047RHEL 9 must automatically expire temporary accounts within 72 hours.Next · V-258049 →RHEL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.