SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

The SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide (V1 R5) has 210 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

210STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

SLEM 5 must not have unnecessary account capabilities.

SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

SLEM 5 must not have unnecessary account capabilities.

Description

Discussion Text

Accounts providing no operational purpose provide additional opportunities for system compromise. Therefore all necessary noninteractive accounts should not have an interactive shell assigned to them.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-261358

Rule

SV-261358r996829_rule

Severity

medium

Rule Version

SLEM-05-411060

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify all noninteractive SLEM 5 accounts do not have an interactive shell assigned to them with the following command:

Check the system accounts on the system.

     > awk -F: '($7 !~ "/sbin/nologin" && $7 !~ "/bin/false"){print $1 ":" $3 ":" $7}' /etc/passwd
     root:0:/bin/bash
     nobody:65534:/bin/bash

Obtain the list of authorized system accounts from the information system security officer (ISSO).

If noninteractive accounts such as "games" or "nobody" are listed with an interactive shell, this is a finding.

Implementation Procedure

Fix Text

Configure SLEM 5 so that all noninteractive accounts on the system have no interactive shell assigned to them.

Run the following command to disable the interactive shell for a specific noninteractive user account:

     > sudo usermod --shell /sbin/nologin nobody

STIG check 95 of 210 in the SUSE Linux Enterprise Micro (SLEM) 5 STIG checklist

← Previous · V-261357SLEM 5 must not have unnecessary accounts.Next · V-261359 →SLEM 5 root account must be the only account with unrestricted access to the system.