Solaris 10 X86 Security Technical Implementation Guide

The Solaris 10 X86 Security Technical Implementation Guide (V2 R4) has 513 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

513STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

All interactive user's home directories must be owned by their respective users.

Solaris 10 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

All interactive user's home directories must be owned by their respective users.

Description

Discussion Text

If users do not own their home directories, unauthorized users could access user files.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-220082

Rule

SV-220082r603266_rule

Severity

medium

Rule Version

GEN001500

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the ownership of each user's home directory listed in the /etc/passwd file.
 
Procedure:  
# cut -d : -f 6 /etc/passwd | xargs -n1 ls -ld | more

If any user's home directory is not owned by the assigned user, this is a finding.

Implementation Procedure

Fix Text

Change the owner of a user's home directory to its assigned user.

Procedure:
# chown <user> <home directory>

STIG check 12 of 513 in the Solaris 10 X86 STIG checklist

← Previous · V-220081Library files must have mode 0755 or less permissive.Next · V-220083 →All interactive user's home directories must be group-owned by the home directory owner's primary group.